Ahmed Mohamed Sabri Amsamms
Amsamms
/ Dockerfile
Created
September 8, 2026 05:06
Verification testbed (Dockerfile) for the OSV-SCALIBR erlang/rebarlock inventory extractor - google/osv-scalibr#1952
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Verification image for the OSV-SCALIBR "erlang/rebarlock" software inventory extractor. | |
| # | |
| # Approved PRP issue : https://github.com/google/osv-scalibr/issues/1952 | |
| # Pull request : https://github.com/google/osv-scalibr/pull/2404 | |
| # Distribution method: rebar3 / rebar.lock (Hex package manager for Erlang/OTP) | |
| # OSV ecosystems : Hex, plus GIT for git-pinned dependencies | |
| # | |
| # This image does NOT copy in a test fixture. It runs rebar3 itself so that the | |
| # rebar.lock inside the image is genuinely produced by the build tool, and it is | |
| # chosen to cover all three cases the extractor handles: |