Docker 27.2.0 breaks authentication (somehow)

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Why are we doing this work

Docker 27.2.0 was released 2 days ago with these changes from 27.1.2.

Something in the changes has broken the release jobs in the Container Scanning analyzer project.

The error (example) is:

denied: requested access to the resource is denied

This was minimally reproduced in a test project:

• Broken
• Fixed

The fix was to downgrade the Docker image used.

To fix the CS project, I pinned the version of docker-latest_ruby in the build-images project.

This issue is to remove the pin once we work-out why docker 27.2.0 breaks our release.

Relevant links

Non-functional requirements

• Documentation:
• Feature flag:
• Performance:
• Testing:

Implementation plan

• One of:
  • Option 1: rm -f ~/.docker/config.json before authenticating
  • Option 2: wait for an upstream fix
  • Option 3: stop appending the repository name to the registry host:port.
• Unpin the version.
• Take care of the undocumented use of registry name with image path https://github.com/docker/cli/issues/5382#issuecomment-2321110163. Done: gitlab-org/security-products/analyzers/container-scanning!3062 (merged)

Verification steps