WhiteSource扫描无争议码头图像:无法提取layer.tar

Question

我试图通过为我的容器使用不显眼的图像来增加安全性，使用来自google的图像作为基本图像https://github.com/GoogleContainerTools/distroless/tree/master/java

当我试图用java -jar wss-unified-agent.jar -apiKey $API_KEY -wss.url $URL -c whitesource-docker.properties -project mytestproject -product mytestproduct命令在本地扫描它时

我在日志和0系统包中收到了一些警告。因此，没有创建新的项目。

[INFO] [2020-02-21 18:09:01,051 +0700] - Extracting file /tmp/WhiteSource-Docker_507e746a-ee9f-4158-b2c5-22d13f4da998/gcr.io-distroless-java.tar - Size 197453824 Bytes (188 MBs)- Free Space 227714412544 Bytes (217165 MBs)
[WARN] [2020-02-21 18:09:01,589 +0700] - Error extracting file layer.tar: /tmp/WhiteSource-Docker_507e746a-ee9f-4158-b2c5-22d13f4da998/gcr.io-distroless-java/7bff0f034dc797b09394b6136265054e798556abd7438fa31417f04302f23db7/./usr/share/doc/ca-certificates/copyright (No such file or directory)
[WARN] [2020-02-21 18:09:01,590 +0700] - Was not able to extract layer.tar (docker image TAR file)
[INFO] [2020-02-21 18:09:03,711 +0700] - Found 0 system packages in image 'gcr.io/distroless/java'

在我的whitesource-docker.properties中，我有一个选项docker.includes=my_distroless gcr.io/distroless/java

这是预期的行为吗？

Answer 1

以管理员身份运行命令行，并验证计算机上是否有足够的空间。