Skip to content

Commit

Permalink
Add to the icm schema a field to indicate if the icm should be ignored
Browse files Browse the repository at this point in the history
This enables a path to deprecation.

Today, scanners depend on this file primarilly for the list of
content_sets.

In the future, with konflux-ci, we want third-party scanners to refer to
the dnf database for a more precise mapping of which rpms come from
which content_sets.

The idea here is that image providers can still publish an icm file, but
if the from_dnf_hint is set to true, then scanners are supposed to
ignore the icm file and trust the dnf database instead. Scanners that
haven't been ported to the new method will continue to work in the
current imprecise way until they adapt to scanning the dnf database.

Signed-off-by: Ralph Bean <[email protected]>
  • Loading branch information
ralphbean committed Dec 20, 2024
1 parent a4dde6e commit b98194e
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions atomic_reactor/schemas/content_manifest.json
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,11 @@
"description": "Pulp content sets available during the current image build",
"type": "array",
"items": { "$ref": "#/definitions/content_set" }
},
"from_dnf_hint": {
"description": "A hint indicating if scanners should ignore this file and use the dnf database instead for more precise content_sets",
"type": "boolean",
"default": false
}
},
"required": ["metadata"],
Expand Down

0 comments on commit b98194e

Please sign in to comment.