Replace bitnami/git usage with alpine/git

J12934 · Reet00 · commit 0ca66fc02c34 · 2025-08-12T17:20:26.000+02:00
Bitnami git will probbaly be removed in the coming weeks

Signed-off-by: Jannik Hollenbach &lt;jannik.hollenbach@iteratec.com&gt;
diff --git a/documentation/blog/2021-10-27-sast-scanning.md b/documentation/blog/2021-10-27-sast-scanning.md
@@ -272,7 +272,7 @@ spec:
     initContainers:
       - name: "git-clone"
         # Use a container with the git binary
-        image: bitnami/git
+        image: alpine/git
         # We are assembling the git clone URL with HTTP authentication,
         # using the same personal access token as in the git-repo-scanner.
         # Note that using {{{triple braces}}} is important, as otherwise the
diff --git a/documentation/docs/architecture/09_architecture_decisions/adr_0009.md b/documentation/docs/architecture/09_architecture_decisions/adr_0009.md
@@ -155,7 +155,7 @@ spec:
       mountPath: "/etc/rules"
   initContainers:
     - name: git-clone
-      image: bitnami/git
+      image: alpine/git
       command:
         - git
         - clone
diff --git a/hooks/cascading-scans/hook/hook.test.js b/hooks/cascading-scans/hook/hook.test.js
@@ -1033,7 +1033,7 @@ test("should merge initContainers into cascaded scan", () => {
   parentScan.spec.initContainers = [
     {
       name: "test-init",
-      image: "bitnami/git",
+      image: "alpine/git",
       command: ["whoami"],
     },
   ];
@@ -1062,7 +1062,7 @@ test("should merge initContainers into cascaded scan", () => {
         "command": [
           "whoami",
         ],
-        "image": "bitnami/git",
+        "image": "alpine/git",
         "name": "test-init",
       },
       {
@@ -1094,7 +1094,7 @@ test("should not merge initContainers into cascaded scan if not instructed", ()
   parentScan.spec.initContainers = [
     {
       name: "test-init",
-      image: "bitnami/git",
+      image: "alpine/git",
       command: ["whoami"],
     },
   ];
diff --git a/scanners/gitleaks/examples/private-repository/scan.yaml b/scanners/gitleaks/examples/private-repository/scan.yaml
@@ -20,7 +20,7 @@ spec:
   # Define an init container to run the git clone for us
   initContainers:
     - name: "git-clone"
-      image: bitnami/git
+      image: alpine/git
       # Specify that the "repo" volume should also be mounted on the
       # initContainer
       volumeMounts:
diff --git a/scanners/gitleaks/examples/provide-own-rules/scan.yaml b/scanners/gitleaks/examples/provide-own-rules/scan.yaml
@@ -48,7 +48,7 @@ spec:
   # Define an init container to run the git clone for us
   initContainers:
     - name: "git-clone"
-      image: bitnami/git
+      image: alpine/git
       # Specify that the "repo" volume should also be mounted on the 
       # initContainer
       volumeMounts:
diff --git a/scanners/gitleaks/examples/secureCodeBox/scan.yaml b/scanners/gitleaks/examples/secureCodeBox/scan.yaml
@@ -20,7 +20,7 @@ spec:
   # Define an init container to run the git clone for us
   initContainers:
     - name: "git-clone"
-      image: bitnami/git
+      image: alpine/git
       # Specify that the "repo" volume should also be mounted on the
       # initContainer
       volumeMounts:
diff --git a/scanners/gitleaks/integration-tests/gitleaks.test.js b/scanners/gitleaks/integration-tests/gitleaks.test.js
@@ -31,7 +31,7 @@ test(
       [
         {
           name: "init-git",
-          image: "bitnami/git",
+          image: "alpine/git",
           command: [
             "bash",
             "-c",
diff --git a/scanners/semgrep/.helm-docs.gotmpl b/scanners/semgrep/.helm-docs.gotmpl
@@ -64,7 +64,7 @@ spec:
   initContainers:
     - name: "provision-git"
       # Use an image that includes git
-      image: bitnami/git
+      image: alpine/git
       # Mount the same volume we also use in the main container
       volumeMounts:
         - mountPath: "/repo/"
@@ -123,7 +123,7 @@ spec:
         mountPath: "/repo/"
     initContainers:
       - name: "git-clone"
-        image: bitnami/git
+        image: alpine/git
         # The command assumes that GITHUB_TOKEN contains a GitHub access token with access to the repository.
         # GITHUB_TOKEN is set below in the "env" section.
         # If you do not wan to use an access token, remove it from the URL below.
diff --git a/scanners/semgrep/README.md b/scanners/semgrep/README.md
@@ -78,7 +78,7 @@ spec:
   initContainers:
     - name: "provision-git"
       # Use an image that includes git
-      image: bitnami/git
+      image: alpine/git
       # Mount the same volume we also use in the main container
       volumeMounts:
         - mountPath: "/repo/"
@@ -137,7 +137,7 @@ spec:
         mountPath: "/repo/"
     initContainers:
       - name: "git-clone"
-        image: bitnami/git
+        image: alpine/git
         # The command assumes that GITHUB_TOKEN contains a GitHub access token with access to the repository.
         # GITHUB_TOKEN is set below in the "env" section.
         # If you do not wan to use an access token, remove it from the URL below.
diff --git a/scanners/semgrep/docs/README.ArtifactHub.md b/scanners/semgrep/docs/README.ArtifactHub.md
@@ -83,7 +83,7 @@ spec:
   initContainers:
     - name: "provision-git"
       # Use an image that includes git
-      image: bitnami/git
+      image: alpine/git
       # Mount the same volume we also use in the main container
       volumeMounts:
         - mountPath: "/repo/"
@@ -142,7 +142,7 @@ spec:
         mountPath: "/repo/"
     initContainers:
       - name: "git-clone"
-        image: bitnami/git
+        image: alpine/git
         # The command assumes that GITHUB_TOKEN contains a GitHub access token with access to the repository.
         # GITHUB_TOKEN is set below in the "env" section.
         # If you do not wan to use an access token, remove it from the URL below.
diff --git a/scanners/semgrep/examples/vulnerable-flask-app/scan.yaml b/scanners/semgrep/examples/vulnerable-flask-app/scan.yaml
@@ -20,7 +20,7 @@ spec:
     - "/test/flask"
   initContainers:
     - name: "provision-git"
-      image: bitnami/git
+      image: alpine/git
       command:
         - git
         - clone
diff --git a/scanners/semgrep/integration-tests/semgrep.test.js b/scanners/semgrep/integration-tests/semgrep.test.js
@@ -69,7 +69,7 @@ test(
       // initContainers
       [{
           "name": "init-git",
-          "image": "bitnami/git",
+          "image": "alpine/git",
           "command": ["git", "clone", "https://github.com/we45/Vulnerable-Flask-App", "/test/flask/"],
           "volumeMounts": [{
               "mountPath": "/test/",
diff --git a/scanners/trivy/examples/filesystem/scan.yaml b/scanners/trivy/examples/filesystem/scan.yaml
@@ -18,7 +18,7 @@ spec:
   # Define an init container to run the git clone for us
   initContainers:
     - name: "git-clone"
-      image: bitnami/git
+      image: alpine/git
       # Specify that the "repo" volume should also be mounted on the
       # initContainer
       volumeMounts:
diff --git a/scanners/trivy/integration-tests/trivy.test.js b/scanners/trivy/integration-tests/trivy.test.js
@@ -50,7 +50,7 @@ test(
       [
         {
           name: "init-git",
-          image: "bitnami/git",
+          image: "alpine/git",
           command: [
             "bash",
             "-c",

Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,7 @@ test(`
`31`	`31`	`[`
`32`	`32`	`{`
`33`	`33`	`name: "init-git",`
`34`		`- image: "bitnami/git",`
	`34`	`+ image: "alpine/git",`
`35`	`35`	`command: [`
`36`	`36`	`"bash",`
`37`	`37`	`"-c",`