Analyze with Non-Daemon podman
Author: dja-frCreated Aug 24, 2022Updated Sep 17, 2026
Labelsenhancement
What would you like to be added: I could be nice if podman:yourrepo/yourimage:tag work with a non-daemonic usage of podman.
Why is this needed: In CICD with rootless setup of buildah/podman there no daemon running. To make an analysis we have to push first to the docker registry and use registry:yourrepo/yourimage:tag I could be a waste of time and resources (especially in case how we make an syft + grype and it's useless to push a vulnerable image into the registry).
Additional context:
I don't know if it could help but it's ok with dive : https://github.com/wagoodman/dive
Source: anchore/syft