Paclair fail to retrieve image with no layers

[ilyesFh]

$ python -m paclair --conf /source/conf.yml Docker ${IMAGE} push
Traceback (most recent call last):
File "/usr/local/lib/python3.8/runpy.py", line 194, in _run_module_as_main
return _run_code(code, main_globals, None,
File "/usr/local/lib/python3.8/runpy.py", line 87, in _run_code
exec(code, run_globals)
File "/usr/local/lib/python3.8/site-packages/paclair/main.py", line 105, in
main()
File "/usr/local/lib/python3.8/site-packages/paclair/main.py", line 71, in main
paclair_object.push(args.plugin, host)
File "/usr/local/lib/python3.8/site-packages/paclair/handler.py", line 76, in push
self._plugins[plugin].push(name)
File "/usr/local/lib/python3.8/site-packages/paclair/plugins/abstract_plugin.py", line 53, in push
return self.clair.post_ancestry(self.create_ancestry(name))
File "/usr/local/lib/python3.8/site-packages/paclair/plugins/docker_plugin.py", line 68, in create_ancestry
return DockerAncestry(self.create_docker_image(name))
File "/usr/local/lib/python3.8/site-packages/paclair/ancestries/docker.py", line 24, in init
for layer in docker_image.get_layers():
File "/usr/local/lib/python3.8/site-packages/paclair/docker/docker_image.py", line 85, in get_layers
fs_layers = manifest['layers']
KeyError: 'layers'

[ilyesFh]

{
"schemaVersion": 2,
"mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
"manifests": [
{
"mediaType": "application/vnd.docker.distribution.manifest.v2+json",
"size": 1788,
"digest": "sha256:2542a516a2f88d2223f25ac79186c76e461bf2da8f27a15502184adf54273302",
"platform": {
"architecture": "amd64",
"os": "linux"
}
},
{
"mediaType": "application/vnd.docker.distribution.manifest.v2+json",
"size": 1789,
"digest": "sha256:1f6b5777aedc6b6ba94dc03a311e5b5222bae5fca26aba65716f95d6a219ea56",
"platform": {
"architecture": "arm64",
"os": "linux"
}
}
]
}

[SofyaTavrovskaya]

@ilyesFh What image did you try to scan using Paclair?

I have the same issue with image: gcr.io/kubernetes-e2e-test-images/sample-apiserver:1.17.
Paclair can't work with multi-platform images, like gcr.io/kubernetes-e2e-test-images/sample-apiserver:1.17.

The manifest, that you specify, it's list manifests or "fat manifest". If I understand clearly, Docker API, by default, returns this kind of manifest if another doesn't specify in request header.

The only workaround I suggest specifying needed manifest's mediaType in request headers :

resp = requests.get(
            url,
            verify=self.verify,
            headers={"Accept": "application/vnd.docker.distribution.manifest.v2+json",
                     "Authorization": "{}".format(token)},
            stream=True
        )