Rely on container build compression for CA analyzers
Why are we doing this work
With gitlab-org/security-products/ci-templates!374 (merged), the CI template we use to build Container Scanning and Dependency Scanning images in groupcomposition analysis supports compression as part of the container image build.
Gemnasium-maven and container-scanning are known to use compression as part of the build scripts:
- https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium/blob/9f0242b4/build/gemnasium-maven/debian/install.sh#L158-158
- gitlab-org/security-products/analyzers/container-scanning!2868 (merged)
We'd like to remove these instances of compression and use the container build compression instead.
Relevant links
Non-functional requirements
-
Documentation: -
Feature flag: -
Performance: -
Testing:
Implementation plan
-
Remove explicit compression in Gemnasium -
Remove explicit compression in Container Scanning