image

var Command = &cli.Command{
	Name:  "image",
	Usage: "docker/oci image tools",

	HideHelpCommand: true,

	Category: utility.Category,

	Commands: []*cli.Command{
		toolCommand("lint", "lint Dockerfile using dockle", func(image string) engine.Container {
			return engine.Container{
				Image: "goodwithtech/dockle:v0.4.15",

				Env: map[string]string{
					"DOCKER_CONTENT_TRUST": "1",
				},

				Args:   []string{image},
				Mounts: []engine.ContainerMount{dockerSocket},
			}
		}),

		toolCommand("scan", "scan image vulnerabilities using trivy", func(image string) engine.Container {
			return engine.Container{
				Image: "aquasec/trivy:0.59.0",

				Args: []string{"--quiet", "image", image},

				Mounts: []engine.ContainerMount{
					{Path: "/root/.cache/", Volume: "trivy-cache"},
				},
			}
		}),

		toolCommand("inspect", "inspect image using whaler", func(image string) engine.Container {
			return engine.Container{
				Image:    "pegleg/whaler",
				Platform: "linux/amd64",

				Args:   []string{image},
				Mounts: []engine.ContainerMount{dockerSocket},
			}
		}),

		toolCommand("bom", "show image bill of material using syft", func(image string) engine.Container {
			return engine.Container{
				Image: "anchore/syft",

				Args:   []string{"-o", "syft-table", image},
				Mounts: []engine.ContainerMount{dockerSocket},
			}
		}),

		toolCommand("browse", "browse image using dive (interactive)", func(image string) engine.Container {
			return engine.Container{
				Image:    "wagoodman/dive:v0.12",
				Platform: "linux/amd64",

				Args:   []string{image},
				Mounts: []engine.ContainerMount{dockerSocket},
			}
		}),
	},
}