Revert "Update syft image and doc - use docker commands (#1307)"

This reverts commit 952c1ce.
microsoft · Dec 4, 2024 · e94161b · e94161b
1 parent 3c58d59
commit e94161b
Show file tree

Hide file tree

Showing 4 changed files with 41 additions and 254 deletions.
diff --git a/docs/update-syft.md b/docs/update-syft.md
@@ -12,40 +12,19 @@ To do this:
     ```
 
 2. Find the [latest version of Syft][2]
-3. Pull the latest container image
+3. Install [Skopeo][3]
+4. Use [`skopeo`][4] to copy the manifest and images to our Azure Container Registry:
 
     ```
-    $ docker pull docker.io/anchore/syft:v{LATEST}
-    v0.53.4: Pulling from anchore/syft
-    0d60d5ab2113: Pull complete
-    26136f3e3dd3: Pull complete
-    497aa7f04842: Pull complete
-    Digest: sha256:37e85e8efdeaabb1b6f65c5bc175b664cb05d1aaddd0d922130b8e25d6e49726
-    Status: Downloaded newer image for anchore/syft:v{LATEST}
-    docker.io/anchore/syft:v{LATEST}
+    skopeo copy --all docker://docker.io/anchore/syft:{LATEST} docker://governancecontainerregistry.azurecr.io/syft:{LATEST}
     ```
 
-4. Retag the container image
-
-    ```
-    $ docker tag docker.io/anchore/syft:v{LATEST} governancecontainerregistry.azurecr.io/syft:v{LATEST}
-    ```
-   
-5. Push the new image to the registry
-
-    ```
-    $ docker push governancecontainerregistry.azurecr.io/syft:v{LATEST}
-    The push refers to repository [governancecontainerregistry.azurecr.io/syft]
-    9c858c120b14: Pushed
-    840f3b941d62: Pushed
-    21ce82bb7448: Pushed
-    v{LATEST}: digest: sha256:04ed9c717a814fdccf52758b67333632a0ff16840fc393f5fba5864285eaebbe size: 945
-    ```
-
-6. Update the container reference in [`LinuxScanner`][3]
-7. Update [the models][4] that map the Syft output
+5. Update the container reference in [`LinuxScanner`][5]
+6. Update [the models][6] that map the Syft output
 
 [1]: https://github.com/anchore/syft
 [2]: https://github.com/anchore/syft/releases/latest
-[3]: https://github.com/microsoft/component-detection/blob/aaf865e38112fb2448f5866ab06d5898358403f6/src/Microsoft.ComponentDetection.Detectors/linux/LinuxScanner.cs#L20
-[4]: https://github.com/microsoft/component-detection/blob/main/src/Microsoft.ComponentDetection.Detectors/linux/Contracts/SyftOutput.cs
+[3]: https://github.com/containers/skopeo/blob/main/install.md
+[4]: https://github.com/containers/skopeo
+[5]: https://github.com/microsoft/component-detection/blob/aaf865e38112fb2448f5866ab06d5898358403f6/src/Microsoft.ComponentDetection.Detectors/linux/LinuxScanner.cs#L20
+[6]: https://github.com/microsoft/component-detection/blob/main/src/Microsoft.ComponentDetection.Detectors/linux/Contracts/SyftOutput.cs