@@ -12,19 +12,40 @@ To do this:
1212 ```
1313
14142. Find the [latest version of Syft][2]
15- 3. Install [Skopeo][3]
16- 4. Use [`skopeo`][4] to copy the manifest and images to our Azure Container Registry:
15+ 3. Pull the latest container image
1716
1817 ```
19- skopeo copy --all docker://docker.io/anchore/syft:{LATEST} docker://governancecontainerregistry.azurecr.io/syft:{LATEST}
18+ $ docker pull docker.io/anchore/syft:v{LATEST}
19+ v0.53.4: Pulling from anchore/syft
20+ 0d60d5ab2113: Pull complete
21+ 26136f3e3dd3: Pull complete
22+ 497aa7f04842: Pull complete
23+ Digest: sha256:37e85e8efdeaabb1b6f65c5bc175b664cb05d1aaddd0d922130b8e25d6e49726
24+ Status: Downloaded newer image for anchore/syft:v{LATEST}
25+ docker.io/anchore/syft:v{LATEST}
2026 ```
2127
22- 5. Update the container reference in [`LinuxScanner`][5]
23- 6. Update [the models][6] that map the Syft output
28+ 4. Retag the container image
29+
30+ ```
31+ $ docker tag docker.io/anchore/syft:v{LATEST} governancecontainerregistry.azurecr.io/syft:v{LATEST}
32+ ```
33+
34+ 5. Push the new image to the registry
35+
36+ ```
37+ $ docker push governancecontainerregistry.azurecr.io/syft:v{LATEST}
38+ The push refers to repository [governancecontainerregistry.azurecr.io/syft]
39+ 9c858c120b14: Pushed
40+ 840f3b941d62: Pushed
41+ 21ce82bb7448: Pushed
42+ v{LATEST}: digest: sha256:04ed9c717a814fdccf52758b67333632a0ff16840fc393f5fba5864285eaebbe size: 945
43+ ```
44+
45+ 6. Update the container reference in [`LinuxScanner`][3]
46+ 7. Update [the models][4] that map the Syft output
2447
2548[1]: https://github.com/anchore/syft
2649[2]: https://github.com/anchore/syft/releases/latest
27- [3]: https://github.com/containers/skopeo/blob/main/install.md
28- [4]: https://github.com/containers/skopeo
29- [5]: https://github.com/microsoft/component-detection/blob/aaf865e38112fb2448f5866ab06d5898358403f6/src/Microsoft.ComponentDetection.Detectors/linux/LinuxScanner.cs#L20
30- [6]: https://github.com/microsoft/component-detection/blob/main/src/Microsoft.ComponentDetection.Detectors/linux/Contracts/SyftOutput.cs
50+ [3]: https://github.com/microsoft/component-detection/blob/aaf865e38112fb2448f5866ab06d5898358403f6/src/Microsoft.ComponentDetection.Detectors/linux/LinuxScanner.cs#L20
51+ [4]: https://github.com/microsoft/component-detection/blob/main/src/Microsoft.ComponentDetection.Detectors/linux/Contracts/SyftOutput.cs
0 commit comments