scan container images with podman

[nekator]

I would like to use the jfrog-cli to scan my container images with podman instead of docker because i´m running the cli with tekton inside a k8s cluster and there is no docker available. e.g. jf podman scan

The jfrog-cli-full image has podman already included an so it would be nice to have a container image scanning command using podman instead of docker.

Additional context
jfrog/jfrog-ecosystem-integration-env#19

[vigneshsweekaran]

When can we expect this feature ?. Jfrog-cli to use podman to scan the images

[sverdlov93]

@nekator @vigneshsweekaran , @gira0, @bmanuel, and @vigneshsweekaran
Thanks for reaching out.
The ability to scan podman images already exists but is currently without a specific command, although it's on our roadmap to add it.
You can run:

podman save --output image.tar
jf scan image.tar

And the same with buildah/oci/etc.

[yannc21]

any updates on this ? I'd be nice to support nerdctl (provided with Rancher Desktop) as well

[eyalbe4]

@yannc21,
I recommend closing this issue, and reopening it under github.com/jfrog/jfrog-cli-security so that it receives more visibility by the team.

[redwall21]

A possible workaround for this is to install the podman-docker package, which emulates the Docker CLI using podman.
https://launchpad.net/ubuntu/jammy/+package/podman-docker

The package will allow one to scan their podman images with the standard jf docker scan command

Hopefully, the jf podman scan command will be implemented sometime soon, but perhaps this is a beneficial alternative in the meantime.