Libraries in openjdk flagged as Component-Unknown for alpine docker

post by chenhansia on Sep 29, 2021

When I try to scan docker image with nexus IQ, it flagged Component-Unknown for libraries in openjdk alpine.

usr/lib/jvm/java-1.8-openjdk/jre/lib/charsets.jar
usr/lib/jvm/java-1.8-openjdk/jre/lib/cldrdata.jar
usr/lib/jvm/java-1.8-openjdk/jre/lib/dnsns.jar

My docker file is as follows

 FROM alpine:3.14
RUN apk update \
    && apk upgrade \
    && apk add --no-cache openjdk8 dumb-init \
    && rm -rf \
         /usr/share/man/* \
         /usr/includes/* \
         /var/cache/apk/*

Would appreciate any assistance to point me to the right direction.

post by plynch on Sep 30, 2021

Hi,

If you are using our licensed products like Nexus IQ, then you are entitled to receive dedicated support via our technical support channel.

Please report your question or issue at https://support.sonatype.com to receive licensed customer support.

Thank you.

Peter