Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

4-dotnet-isolated8.0 and 4-dotnet-isolated8.0-slim images contain codec libraries requiring legal review for use within Microsoft #1017

Open
pmalmsten opened this issue Dec 6, 2023 · 0 comments

Comments

@pmalmsten
Copy link

These images contain the following libraries that require legal review to use within Microsoft (even for non-distributing uses):

  • libdav1d6
  • libgav1-1
  • librav1e0
  • libsvtav1enc1

An example legal review ticket that was generated by Component Governance: https://ossmsft.visualstudio.com/Reviews/_workitems/edit/49022

I traced the installation of these libraries to the apt-get install -y libc-dev step: https://github.com/Azure/azure-functions-docker/blob/2d406db47c62847992851de204281be1a29e2544/host/4/bullseye/amd64/dotnet/dotnet8-isolated/dotnet-isolated-slim.Dockerfile#L33C5-L33C32

Could you please provide a .NET 8 base image which does not include these libaries? #925 would likely work for us as an option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant