logo
docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a
linux/amd64 docker.io

docker.io/swerebenchv2/aquasecurity-tfsec镜像包含Aqua Security开发的tfsec工具,这是一款针对Terraform代码的静态安全扫描工具,可检测Terraform配置中的潜在安全风险与合规性问题,助力用户在部署基础设施即代码(IaC)时发现并修复安全漏洞。

12
浏览次数
3.77GB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a
源镜像
docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a
镜像ID
sha256:de870ea81d14e83755b7fad4b886c599cc89dcdd3f5c9c12a3d12259f06d55e6
镜像 TAG
909-130bc3a
镜像大小
3.77GB
平台架构
linux/amd64
镜像源
docker.io
CMD
/bin/bash
启动入口
工作目录
/tfsec
OS/平台
linux/amd64
镜像创建
2026-04-21T13:27:39.854054829Z
同步时间
2026-07-09 14:54
浏览量
12 次
贡献者
⚙️ 环境变量 5
KeyValue
TZ=Etc/UTC 0
LANG=C.UTF-8 1
LC_ALL=C.UTF-8 2
NO_CONDA=1 3
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:/opt/conda/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 4
🏷️ 镜像标签 3
KeyValue
1.38.1 io.buildah.version
ubuntu org.opencontainers.image.ref.name
22.04 org.opencontainers.image.version
🛡️ 镜像安全扫描
ubuntu 22.04 Trivy 2026-07-09 14:56 查看完整报告
481
低危 LOW
3563
中危 MEDIUM
595
高危 HIGH
58
严重 CRITICAL
受影响目标 (47)
docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a (ubuntu 22.04) ubuntu Conda conda-pkg Node.js node-pkg Python python-pkg usr/local/go/bin/go gobinary usr/local/go/bin/gofmt gobinary usr/local/go/pkg/tool/linux_amd64/addr2line gobinary usr/local/go/pkg/tool/linux_amd64/asm gobinary usr/local/go/pkg/tool/linux_amd64/buildid gobinary usr/local/go/pkg/tool/linux_amd64/cgo gobinary usr/local/go/pkg/tool/linux_amd64/compile gobinary usr/local/go/pkg/tool/linux_amd64/cover gobinary usr/local/go/pkg/tool/linux_amd64/dist gobinary usr/local/go/pkg/tool/linux_amd64/doc gobinary usr/local/go/pkg/tool/linux_amd64/fix gobinary usr/local/go/pkg/tool/linux_amd64/link gobinary usr/local/go/pkg/tool/linux_amd64/nm gobinary usr/local/go/pkg/tool/linux_amd64/objdump gobinary usr/local/go/pkg/tool/linux_amd64/pack gobinary usr/local/go/pkg/tool/linux_amd64/pprof gobinary usr/local/go/pkg/tool/linux_amd64/test2json gobinary usr/local/go/pkg/tool/linux_amd64/trace gobinary usr/local/go/pkg/tool/linux_amd64/vet gobinary /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns-srv/certs-gateway/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns-srv/certs-wildcard/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns-srv/certs/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-common-name-auth/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-common-name-multi/server-1.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-common-name-multi/server-2.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-common-name-multi/server-3.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-gateway/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs-wildcard/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-dns/certs/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-static-ip/certs-metrics-proxy/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/hack/scripts-dev/docker-static-ip/certs/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures-expired/etcd-root-ca-key.pem /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures-expired/server-key.pem /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures/server-revoked.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures/server-wildcard.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/integration/fixtures/server2.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/pkg/proxy/fixtures/server.key.insecure /root/go/pkg/mod/github.com/coreos/etcd@v3.3.13+incompatible/pkg/transport/fixtures/server.key.insecure /root/go/pkg/mod/github.com/google/martian/v3@v3.1.0/cybervillains/cybervillains.go /root/go/pkg/mod/github.com/google/martian@v2.1.0+incompatible/cybervillains/cybervillains.go /root/go/pkg/mod/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028/cmd/gomobile/build_androidapp.go /tfsec/internal/app/tfsec/rules/aws/misc/no_exposing_plaintext_credentials_rule.go

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a  docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a  docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a

Shell快速替换命令

sed -i 's#swerebenchv2/aquasecurity-tfsec:909-130bc3a#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a  docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a  docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a'

镜像构建历史


# 2026-04-21 21:27:43  0.00B 
/bin/sh
                        
# 2026-02-22 17:30:46  1.42GB 
/bin/sh -c #(nop) COPY file:33c4b0461539bd7548570137acd8b82a6a6eb2ca91bd1d0a6247697db2a5a5d4 in /swebench_matterhorn/swebench_instance.json 
                        
# 2026-02-22 17:30:37  0.00B 
/bin/sh -c #(nop) WORKDIR /tfsec
                        
# 2026-02-22 17:30:37  0.00B 
/bin/sh -c <<-DOCKER_RUN_EOF
set -eux;
    git clone -o origin https://github.com/aquasecurity/tfsec /tfsec;
    chmod -R 777 /tfsec;
    cd /tfsec;
    git reset --hard 130bc3adc6032ca6089b0f3d000b5f6b85eae383;
    ( export DEBIAN_FRONTEND=noninteractive ) || true;
    ( apt-get update -qq ) || true;
    ( apt-get install -y -qq golang ) || true;
    ( export GOPATH=$HOME/go ) || true;
    ( export PATH=$PATH:$GOPATH/bin ) || true;
    ( mkdir -p $GOPATH ) || true;
    ( export HOME=/root ) || true;
    ( go mod download ) || true;
    # Keep only the checked-out commit and remove refs/history that can point
    # to newer commits.
    git checkout --detach 130bc3adc6032ca6089b0f3d000b5f6b85eae383;
    for r in $(git remote); do
        git remote remove "$r";
    done;
    git for-each-ref --format='delete %(refname)' refs/heads refs/remotes refs/tags | git update-ref --stdin;
    git reflog expire --expire=now --expire-unreachable=now --all;
    git gc --prune=now;
                        
# 2026-02-22 17:30:13  0.00B 
/bin/sh -c #(nop) ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:$PATH
                        
# 2026-02-22 17:30:01  1.52GB 
/bin/sh -c #(nop) ENV NO_CONDA=1
                        
# 2026-02-22 17:29:54  0.00B 
/bin/sh -c mkdir -p /swebench_matterhorn     && tar -xzf /swebench_matterhorn_repo.tar.gz -C /swebench_matterhorn     && rm /swebench_matterhorn_repo.tar.gz     && mkdir -p /opt/conda/envs/swebench_matterhorn     && tar -xzf /swebench_matterhorn_env.tar.gz -C /opt/conda/envs/swebench_matterhorn     && rm /swebench_matterhorn_env.tar.gz     && /opt/conda/envs/swebench_matterhorn/bin/conda-unpack
                        
# 2026-02-22 17:29:47  0.00B 
/bin/sh -c #(nop) COPY file:61604c43c292b48546055579c93885a922428ac04b5a3f2bd7c87a6a8208dbd4 in / 
                        
# 2026-02-22 17:29:47  0.00B 
/bin/sh -c #(nop) COPY file:38d2cec6c3688d3db2fdf6a899d279ccf0f0bf78f9acc300722c98b6d67c4b26 in / 
                        
# 2026-02-22 17:29:46  0.00B 
/bin/sh -c wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-py312_24.7.1-0-Linux-x86_64.sh -O ~/miniconda.sh &&     /bin/bash ~/miniconda.sh -b -p /opt/conda &&     rm ~/miniconda.sh &&     /opt/conda/bin/conda clean -tip &&     ln -s /opt/conda/etc/profile.d/conda.sh /etc/profile.d/conda.sh &&     echo ". /opt/conda/etc/profile.d/conda.sh" >> ~/.bashrc
                        
# 2026-02-22 17:29:40  0.00B 
/bin/sh -c apt-get update --fix-missing &&     apt-get install -y bzip2 ca-certificates wget git &&     apt-get clean &&     rm -rf /var/lib/apt/lists/*
                        
# 2026-02-22 17:29:35  0.00B 
/bin/sh -c #(nop) ENV PATH=/opt/conda/bin:$PATH
                        
# 2026-02-22 17:29:35  0.00B 
/bin/sh -c #(nop) ENV LANG=C.UTF-8 LC_ALL=C.UTF-8
                        
# 2026-01-16 00:09:52  333.87KB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c adduser --disabled-password --gecos 'dog' nonroot # buildkit
                        
# 2026-01-16 00:09:51  0.00B 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c go version # buildkit
                        
# 2026-01-16 00:09:51  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-01-16 00:09:51  459.38MB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c set -eux; 	now="$(date '+%s')"; 	arch="$(dpkg --print-architecture)"; 	url=; 	case "$arch" in 		'amd64') 			url='https://dl.google.com/go/go1.19.13.linux-amd64.tar.gz'; 			;; 		'armhf') 			url='https://dl.google.com/go/go1.19.13.linux-armv6l.tar.gz'; 			;; 		'arm64') 			url='https://dl.google.com/go/go1.19.13.linux-arm64.tar.gz'; 			;; 		'i386') 			url='https://dl.google.com/go/go1.19.13.linux-386.tar.gz'; 			;; 		'mips64el') 			url='https://dl.google.com/go/go1.19.13.linux-mips64le.tar.gz'; 			;; 		'ppc64el') 			url='https://dl.google.com/go/go1.19.13.linux-ppc64le.tar.gz'; 			;; 		'riscv64') 			url='https://dl.google.com/go/go1.19.13.linux-riscv64.tar.gz'; 			;; 		's390x') 			url='https://dl.google.com/go/go1.19.13.linux-s390x.tar.gz'; 			;; 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; 	esac; 		wget -O go.tgz "$url" --progress=dot:giga;     tar -C /usr/local -xzf go.tgz;     rm go.tgz; # buildkit
                        
# 2026-01-16 00:09:32  296.07MB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt update && apt install -y wget git build-essential && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-01-16 00:09:32  0.00B 设置环境变量 TZ
ENV TZ=Etc/UTC
                        
# 2026-01-16 00:09:32  0.00B 定义构建参数
ARG DEBIAN_FRONTEND=noninteractive
                        
# 2025-10-14 01:23:20  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/bash"]
                        
# 2025-10-14 01:23:20  77.87MB 
/bin/sh -c #(nop) ADD file:d025507456f1d7d19195885b1c02a346454d60c9348cbd3be92431f2d7e2666e in / 
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.version=22.04
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.ref.name=ubuntu
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  ARG LAUNCHPAD_BUILD_ARCH
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  ARG RELEASE
                        
                    

镜像信息

{
    "Id": "sha256:de870ea81d14e83755b7fad4b886c599cc89dcdd3f5c9c12a3d12259f06d55e6",
    "RepoTags": [
        "swerebenchv2/aquasecurity-tfsec:909-130bc3a",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a"
    ],
    "RepoDigests": [
        "swerebenchv2/aquasecurity-tfsec@sha256:429159c94113fc0e5be8128562382b706b06ce89072d8839b317cea96ec23c91",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/aquasecurity-tfsec@sha256:673cf1d947d95ec3b1f5f6a0af192698836071276ec50eb228e8aa06d2e04184"
    ],
    "Parent": "",
    "Comment": "FROM docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a",
    "Created": "2026-04-21T13:27:39.854054829Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "0325075c136a",
        "Domainname": "",
        "User": "",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "TZ=Etc/UTC",
            "LANG=C.UTF-8",
            "LC_ALL=C.UTF-8",
            "NO_CONDA=1",
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:/opt/conda/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
        ],
        "Cmd": [
            "/bin/bash"
        ],
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/tfsec",
        "Entrypoint": null,
        "OnBuild": [],
        "Labels": {
            "io.buildah.version": "1.38.1",
            "org.opencontainers.image.ref.name": "ubuntu",
            "org.opencontainers.image.version": "22.04"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 3772543566,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/d921ad7e10c1bfbb3f46b8ea2265e71ffec225027de3ddacaa6932592efd2a0b/diff:/var/lib/docker/overlay2/b7b8e8dbdd16c69df75bddbc7bb1fb22fc80f2d2fd23247c71d70a5b42305a69/diff:/var/lib/docker/overlay2/fdd6ab2b45a47408e05ca43dc5fd343d589ff62fde249b34e5cbf6dac31e9c8d/diff:/var/lib/docker/overlay2/0f0cdfccb4d3414a63217f922cbcc8bd43f3ee45c98fa326550ffde1d2fe3348/diff:/var/lib/docker/overlay2/f1cb8f3eaf26b803e91b84bdc8b2c9c2c01c6a56b570bdfe80f2d9d83338d510/diff:/var/lib/docker/overlay2/6735caedf44bf271dd8520a5f6f062d675373cdb31eeaed96d602cb15cf99ad1/diff:/var/lib/docker/overlay2/494052ebd0d7093a2919ea6da70b0cc68dda59cc59824edfab742d53363834e0/diff",
            "MergedDir": "/var/lib/docker/overlay2/147be98bb704e1646eac92e0c97d9bfa4263e1cd0f4840e6a03a38603b2f86ed/merged",
            "UpperDir": "/var/lib/docker/overlay2/147be98bb704e1646eac92e0c97d9bfa4263e1cd0f4840e6a03a38603b2f86ed/diff",
            "WorkDir": "/var/lib/docker/overlay2/147be98bb704e1646eac92e0c97d9bfa4263e1cd0f4840e6a03a38603b2f86ed/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:73974f74b436f39a2fdb6461b1e3f7c3e41c73325776fa71d16b942a5b4a365b",
            "sha256:21a54c18e0ac53f05802e0490c933d7b4646c84ee1e38698733ab8348e324172",
            "sha256:d470c2401f710f32c909dd949600333c3101ccf3d0da05c660479ef41375b8c6",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:6ba31c38ae603ff441984fbba4f5134ebcbba76bafad9ba077c263298ec4a728",
            "sha256:cce84fcf7dc7497134a8993a82d3a58e0d9649b2c5dfaa34621f5014ad4d7d24",
            "sha256:0a80fab664309639bcb8e6c901d3db827d6b9317961fe727789396650dc01b4e",
            "sha256:34199c15b1942d95bdec2575569ce5e9f43571725c8d18132fa082d87648fdaa"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-09T14:54:09.444305954+08:00"
    }
}

更多版本

docker.io/swerebenchv2/aquasecurity-tfsec:909-130bc3a

linux/amd64 docker.io3.77GB2026-07-09 14:54
11
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×