logo
docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8
linux/amd64 docker.io

这是一个包含tfsec工具的Docker容器镜像,tfsec是一款针对Terraform代码的静态安全分析工具,可用于检测Terraform配置中的安全漏洞、不符合安全最佳实践的问题以及潜在风险,帮助用户在部署基础设施前发现并修复相关安全问题。

9
浏览次数
2.39GB
镜像大小
源镜像
docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8
镜像ID
sha256:b0539a039ae8608ea59b0fa5525317f765329fd435d046ca606d65386ee2c4c1
镜像 TAG
848-aeaf3b8
镜像大小
2.39GB
平台架构
linux/amd64
镜像源
docker.io
CMD
/bin/bash
启动入口
工作目录
/tfsec
OS/平台
linux/amd64
镜像创建
2026-04-22T08:42:18.553073203Z
同步时间
2026-07-07 04:55
浏览量
9 次
贡献者
⚙️ 环境变量 5
KeyValue
TZ=Etc/UTC 0
LANG=C.UTF-8 1
LC_ALL=C.UTF-8 2
NO_CONDA=1 3
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:/opt/conda/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 4
🏷️ 镜像标签 3
KeyValue
1.38.1 io.buildah.version
ubuntu org.opencontainers.image.ref.name
22.04 org.opencontainers.image.version
🛡️ 镜像安全扫描
ubuntu 22.04 Trivy 2026-07-07 04:56 查看完整报告
463
低危 LOW
3561
中危 MEDIUM
583
高危 HIGH
58
严重 CRITICAL
受影响目标 (24)
docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8 (ubuntu 22.04) ubuntu Conda conda-pkg Node.js node-pkg Python python-pkg usr/local/go/bin/go gobinary usr/local/go/bin/gofmt gobinary usr/local/go/pkg/tool/linux_amd64/addr2line gobinary usr/local/go/pkg/tool/linux_amd64/asm gobinary usr/local/go/pkg/tool/linux_amd64/buildid gobinary usr/local/go/pkg/tool/linux_amd64/cgo gobinary usr/local/go/pkg/tool/linux_amd64/compile gobinary usr/local/go/pkg/tool/linux_amd64/cover gobinary usr/local/go/pkg/tool/linux_amd64/dist gobinary usr/local/go/pkg/tool/linux_amd64/doc gobinary usr/local/go/pkg/tool/linux_amd64/fix gobinary usr/local/go/pkg/tool/linux_amd64/link gobinary usr/local/go/pkg/tool/linux_amd64/nm gobinary usr/local/go/pkg/tool/linux_amd64/objdump gobinary usr/local/go/pkg/tool/linux_amd64/pack gobinary usr/local/go/pkg/tool/linux_amd64/pprof gobinary usr/local/go/pkg/tool/linux_amd64/test2json gobinary usr/local/go/pkg/tool/linux_amd64/trace gobinary usr/local/go/pkg/tool/linux_amd64/vet gobinary /tfsec/internal/app/tfsec/rules/aws044.go

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8  docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8  docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8

Shell快速替换命令

sed -i 's#swerebenchv2/tfsec-tfsec:848-aeaf3b8#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8  docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8  docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8'

镜像构建历史


# 2026-04-22 16:42:20  0.00B 
/bin/sh
                        
# 2026-02-22 20:41:31  36.43MB 
/bin/sh -c #(nop) COPY file:63d033c0517266e7bcff9979064058f847d51112eb67c7974bb0d9b3e5923ce8 in /swebench_matterhorn/swebench_instance.json 
                        
# 2026-02-22 20:41:29  0.00B 
/bin/sh -c #(nop) WORKDIR /tfsec
                        
# 2026-02-22 20:41:29  0.00B 
/bin/sh -c <<-DOCKER_RUN_EOF
set -eux;
    git clone -o origin https://github.com/tfsec/tfsec /tfsec;
    chmod -R 777 /tfsec;
    cd /tfsec;
    git reset --hard aeaf3b8f4889073994751ea880b3b7c9ca6f7a7f;
    ( export HOME=/root ) || true;
    ( export GOCACHE=/tmp/go-cache ) || true;
    ( mkdir -p $GOCACHE ) || true;
    ( go env -w GOPROXY=direct ) || true;
    # Keep only the checked-out commit and remove refs/history that can point
    # to newer commits.
    git checkout --detach aeaf3b8f4889073994751ea880b3b7c9ca6f7a7f;
    for r in $(git remote); do
        git remote remove "$r";
    done;
    git for-each-ref --format='delete %(refname)' refs/heads refs/remotes refs/tags | git update-ref --stdin;
    git reflog expire --expire=now --expire-unreachable=now --all;
    git gc --prune=now;
                        
# 2026-02-22 20:41:23  0.00B 
/bin/sh -c #(nop) ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:$PATH
                        
# 2026-02-22 20:41:10  1.52GB 
/bin/sh -c #(nop) ENV NO_CONDA=1
                        
# 2026-02-22 20:41:03  0.00B 
/bin/sh -c mkdir -p /swebench_matterhorn     && tar -xzf /swebench_matterhorn_repo.tar.gz -C /swebench_matterhorn     && rm /swebench_matterhorn_repo.tar.gz     && mkdir -p /opt/conda/envs/swebench_matterhorn     && tar -xzf /swebench_matterhorn_env.tar.gz -C /opt/conda/envs/swebench_matterhorn     && rm /swebench_matterhorn_env.tar.gz     && /opt/conda/envs/swebench_matterhorn/bin/conda-unpack
                        
# 2026-02-22 20:40:56  0.00B 
/bin/sh -c #(nop) COPY file:61604c43c292b48546055579c93885a922428ac04b5a3f2bd7c87a6a8208dbd4 in / 
                        
# 2026-02-22 20:40:55  0.00B 
/bin/sh -c #(nop) COPY file:38d2cec6c3688d3db2fdf6a899d279ccf0f0bf78f9acc300722c98b6d67c4b26 in / 
                        
# 2026-02-22 20:40:55  0.00B 
/bin/sh -c wget --quiet https://repo.anaconda.com/miniconda/Miniconda3-py312_24.7.1-0-Linux-x86_64.sh -O ~/miniconda.sh &&     /bin/bash ~/miniconda.sh -b -p /opt/conda &&     rm ~/miniconda.sh &&     /opt/conda/bin/conda clean -tip &&     ln -s /opt/conda/etc/profile.d/conda.sh /etc/profile.d/conda.sh &&     echo ". /opt/conda/etc/profile.d/conda.sh" >> ~/.bashrc
                        
# 2026-02-22 20:40:48  0.00B 
/bin/sh -c apt-get update --fix-missing &&     apt-get install -y bzip2 ca-certificates wget git &&     apt-get clean &&     rm -rf /var/lib/apt/lists/*
                        
# 2026-02-22 20:40:13  0.00B 
/bin/sh -c #(nop) ENV PATH=/opt/conda/bin:$PATH
                        
# 2026-02-22 20:40:13  0.00B 
/bin/sh -c #(nop) ENV LANG=C.UTF-8 LC_ALL=C.UTF-8
                        
# 2026-01-16 00:09:52  333.87KB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c adduser --disabled-password --gecos 'dog' nonroot # buildkit
                        
# 2026-01-16 00:09:51  0.00B 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c go version # buildkit
                        
# 2026-01-16 00:09:51  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-01-16 00:09:51  459.38MB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c set -eux; 	now="$(date '+%s')"; 	arch="$(dpkg --print-architecture)"; 	url=; 	case "$arch" in 		'amd64') 			url='https://dl.google.com/go/go1.19.13.linux-amd64.tar.gz'; 			;; 		'armhf') 			url='https://dl.google.com/go/go1.19.13.linux-armv6l.tar.gz'; 			;; 		'arm64') 			url='https://dl.google.com/go/go1.19.13.linux-arm64.tar.gz'; 			;; 		'i386') 			url='https://dl.google.com/go/go1.19.13.linux-386.tar.gz'; 			;; 		'mips64el') 			url='https://dl.google.com/go/go1.19.13.linux-mips64le.tar.gz'; 			;; 		'ppc64el') 			url='https://dl.google.com/go/go1.19.13.linux-ppc64le.tar.gz'; 			;; 		'riscv64') 			url='https://dl.google.com/go/go1.19.13.linux-riscv64.tar.gz'; 			;; 		's390x') 			url='https://dl.google.com/go/go1.19.13.linux-s390x.tar.gz'; 			;; 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; 	esac; 		wget -O go.tgz "$url" --progress=dot:giga;     tar -C /usr/local -xzf go.tgz;     rm go.tgz; # buildkit
                        
# 2026-01-16 00:09:32  296.07MB 执行命令并创建新的镜像层
RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt update && apt install -y wget git build-essential && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-01-16 00:09:32  0.00B 设置环境变量 TZ
ENV TZ=Etc/UTC
                        
# 2026-01-16 00:09:32  0.00B 定义构建参数
ARG DEBIAN_FRONTEND=noninteractive
                        
# 2025-10-14 01:23:20  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/bash"]
                        
# 2025-10-14 01:23:20  77.87MB 
/bin/sh -c #(nop) ADD file:d025507456f1d7d19195885b1c02a346454d60c9348cbd3be92431f2d7e2666e in / 
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.version=22.04
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  LABEL org.opencontainers.image.ref.name=ubuntu
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  ARG LAUNCHPAD_BUILD_ARCH
                        
# 2025-10-14 01:23:18  0.00B 
/bin/sh -c #(nop)  ARG RELEASE
                        
                    

镜像信息

{
    "Id": "sha256:b0539a039ae8608ea59b0fa5525317f765329fd435d046ca606d65386ee2c4c1",
    "RepoTags": [
        "swerebenchv2/tfsec-tfsec:848-aeaf3b8",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8"
    ],
    "RepoDigests": [
        "swerebenchv2/tfsec-tfsec@sha256:d795f99ed3dbf8fddda94bdefd64676880f3f6f90f29b15add552fe36e1ca0b8",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/swerebenchv2/tfsec-tfsec@sha256:ca0e719cbda91e82371cd442fbcc460d322235f61c51d6c055bd65b999cca5be"
    ],
    "Parent": "",
    "Comment": "FROM docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8",
    "Created": "2026-04-22T08:42:18.553073203Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "55a3bf030c34",
        "Domainname": "",
        "User": "",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "TZ=Etc/UTC",
            "LANG=C.UTF-8",
            "LC_ALL=C.UTF-8",
            "NO_CONDA=1",
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/conda/bin:/opt/conda/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
        ],
        "Cmd": [
            "/bin/bash"
        ],
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/tfsec",
        "Entrypoint": null,
        "OnBuild": [],
        "Labels": {
            "io.buildah.version": "1.38.1",
            "org.opencontainers.image.ref.name": "ubuntu",
            "org.opencontainers.image.version": "22.04"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 2392718036,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/4860cb90880fb64a126d4b968c3e4816f37bc2facbbb982bcc92a7dd2bc46dfe/diff:/var/lib/docker/overlay2/77a05f978ea6d1ba1aa3962ddd7b0beb9f42f07350ece738c8ab6eb56b0eb802/diff:/var/lib/docker/overlay2/fdd6ab2b45a47408e05ca43dc5fd343d589ff62fde249b34e5cbf6dac31e9c8d/diff:/var/lib/docker/overlay2/0f0cdfccb4d3414a63217f922cbcc8bd43f3ee45c98fa326550ffde1d2fe3348/diff:/var/lib/docker/overlay2/f1cb8f3eaf26b803e91b84bdc8b2c9c2c01c6a56b570bdfe80f2d9d83338d510/diff:/var/lib/docker/overlay2/6735caedf44bf271dd8520a5f6f062d675373cdb31eeaed96d602cb15cf99ad1/diff:/var/lib/docker/overlay2/494052ebd0d7093a2919ea6da70b0cc68dda59cc59824edfab742d53363834e0/diff",
            "MergedDir": "/var/lib/docker/overlay2/c3113db9ffa3115f634797f08af0c6640d1bfe61dd1a4e8b6586f201c62b5484/merged",
            "UpperDir": "/var/lib/docker/overlay2/c3113db9ffa3115f634797f08af0c6640d1bfe61dd1a4e8b6586f201c62b5484/diff",
            "WorkDir": "/var/lib/docker/overlay2/c3113db9ffa3115f634797f08af0c6640d1bfe61dd1a4e8b6586f201c62b5484/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:73974f74b436f39a2fdb6461b1e3f7c3e41c73325776fa71d16b942a5b4a365b",
            "sha256:21a54c18e0ac53f05802e0490c933d7b4646c84ee1e38698733ab8348e324172",
            "sha256:d470c2401f710f32c909dd949600333c3101ccf3d0da05c660479ef41375b8c6",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:6ba31c38ae603ff441984fbba4f5134ebcbba76bafad9ba077c263298ec4a728",
            "sha256:e57c06ef9220e56da48b55cfc9d277eec3f40ce36e4abd6f53c0d17275f3e13f",
            "sha256:5b5def6936437e988ec09118f43f6089c0d6039ade68c105d873193bb866aa64",
            "sha256:5055b4dda0709f261e697e6e915189bc5b4872ee7dad64c47abe8474b3d07b1e"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-07T04:53:48.100849046+08:00"
    }
}

更多版本

docker.io/swerebenchv2/tfsec-tfsec:848-aeaf3b8

linux/amd64 docker.io2.39GB2026-07-07 04:55
8
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×