imjasonh

// You can edit this code!
// Click here and start typing.
package main

import (
	"fmt"
	"os"
	"runtime"
	"time"
)

imjasonh

With yara installed on an amd64/x86_64 environment:

gcloud run deploy maltest \
  --region=us-central1 --memory=4Gi \
  --allow-unauthenticated \
  --execution-environment=gen1 \
  --image=$(CGO_ENABLED=1 KO_DEFAULTBASEIMAGE=cgr.dev/chainguard/malcontent ko build)

imjasonh

package main

import (
	"encoding/xml"
	"fmt"
	"io"
	"net/http"
	"strings"
)

imjasonh

module logrustest

go 1.20

require github.com/sirupsen/logrus v1.9.3

require golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 // indirect

imjasonh

Demoing cgr.dev tag history

We're going to use the new tag history API to see tag updates to cgr.dev/chainguard/static:latest!

First, exchange your Chainguard token for a registry token. This assumes you've set up auth with chainctl auth configure-docker:

tok=$(curl -H "Authorization: Bearer $(echo 'cgr.dev' | docker-credential-cgr get)" -v "https://cgr.dev/token?scope=repository:chainguard/static:pull" | jq -r .token)

imjasonh

package must

import (
	"testing"

	"github.com/google/go-containerregistry/pkg/name"
	v1 "github.com/google/go-containerregistry/pkg/v1"
)

// must.Testing(t).Digest(img)

imjasonh

// Example using our bevy of TF providers (in order):
// - https://github.com/chainguard-dev/terraform-provider-apko
// - https://github.com/chainguard-dev/terraform-provider-oci
// - https://github.com/ko-build/terraform-provider-ko
// - https://github.com/chainguard-dev/terraform-provider-cosign
// - https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/cloud_run_service

// This could be a resource like:
// https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/artifact_registry_repository
variable "repo" {

imjasonh

module cp-progress

go 1.20

require (
	github.com/charmbracelet/bubbles v0.15.0
	github.com/google/go-containerregistry v0.14.0
)

require (

imjasonh

container-report

This is an experimental tool that emits a JSON report of the contents of an image.

It's current intended use is to be passed two images and to have their reports diffed using diff.

Example:

imjasonh

function gauth() {
  gcloud auth login && gcloud auth application-default login
}

# Diff two image filesystems
function cdiff-fs() {
  diff \
    <(crane export $1 - --platform ${3:-linux/amd64} | tar -tvf - | sort) \
    <(crane export $2 - --platform ${3:-linux/amd64} | tar -tvf - | sort)
}