Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't include libexec directories in SCA includes #959

Merged
merged 1 commit into from
Jan 24, 2024

Commits on Jan 24, 2024

  1. Don't include libexec directories in SCA includes

    Our logic for matching libdirs just used a string prefix, but didn't
    include a "/" at the end of the allowlisted directories. This meant we
    matched things under "/usr/libexec", which we probably don't want. The
    only APKs that has "usr/libexec" files are these neon APKs. Since it's
    vendoring various versions of libpq, and we don't want other packages to
    depend on neon (it's huge) but the libpq things directly, we don't want
    to expose these as provides.
    
    Signed-off-by: Jon Johnson <jon.johnson@chainguard.dev>
    jonjohnsonjr committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    43a2f88 View commit details
    Browse the repository at this point in the history