ComputeLayerHashes computes cryptographic digests of image layers and returns them as slice of string hashes.

DefaultContainerConfigs returns a hardcoded slice of container configs, which should be included by default in the security policy.

ParseCommandFromImage inspects the image and returns the command args, which is a combination of ENTRYPOINT and CMD Docker directives.

ParseEnvFromImage inspects the image spec and adds security policy rules for environment variables from the spec.

ParseUserFromImage inspects the image and returns the user and group.

ParseWorkingDirFromImage inspects the image spec and returns working directory if one was set via CWD Docker directive, otherwise returns "/".

PolicyContainersFromConfigs returns a slice of sp.Container generated from a slice of sp.ContainerConfig's.

RemoteImageFromImageName parses a given imageName reference and creates a v1.Image with provided remote.Option opts.