testcontainers/testcontainers-rs

Support specifying images using sha256 digests

Open

#411 opened on Oct 15, 2022

View on GitHub
 (12 comments) (1 reaction) (0 assignees)Rust (194 forks)auto 404
good first issuehelp wanted

Repository metrics

Stars
 (1,098 stars)
PR merge metrics
 (PR metrics pending)

Description

You can run docker images by specifying the sha256 digest of the designated image instead of using a specific version.

Using sha256 is somewhat more secure as it pins the exact image, thus not allowing possible overriding of a tag by a malicious actor.

Usage can be something along:

impl Image for SomeImage {
    type Args = ();

    fn name(&self) -> String {
        "some name"
    }

    fn sha256(&self) -> String {
       "a826cb8a6a0023..."
    }
}

Contributor guide

Research direction
Examine the existing `Image` trait in the codebase to understand its structure and how the name method is used. Then implement a `sha256` method that returns an Option<String> and integrate it into the image pulling logic so that when a digest is provided, it is used instead of the tag.
Tech stack
rust
Domain
backendapitesting
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
RustDocker
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60