Rapid bug identification in container images

A method comprising:

• receiving, by a processor, first metadata about a first container image that includes a first version of a piece of software, the first metadata indicating a first location and a first commit identifier corresponding to first source code from which the first version of the piece of software was built in generating the first container image, wherein the first commit identifier is a first commit hash;
• obtaining, by the processor, the first source code from the first location based on the first commit identifier;
• receiving, by the processor, second metadata about a second container image that includes a second version of the piece of software, the second metadata indicating a second location and a second commit identifier corresponding to second source code from which the second version of the piece of software was built in generating the second container image, wherein the second commit identifier is a second commit hash;
• obtaining, by the processor, the second source code from the second location based on the second commit identifier;
• determining, by the processor, a difference between the first container image and the second container image by comparing the first source code to the second source code;
• and
• generating, by the processor, an output for display indicating the difference between the first container image and the second container image.

A non-transitory computer-readable medium comprising program code that is executable by a processor for causing the processor to:

• receive first metadata about a first container image that includes a first version of a piece of software, the first metadata indicating a first location and a first commit identifier corresponding to first source code from which the first version of the piece of software was built in generating the first container image, wherein the first commit identifier is a first commit hash;
• obtain the first source code from the first location based on the first commit identifier;
• receive second metadata about a second container image that includes a second version of the piece of software, the second metadata indicating a second location and a second commit identifier corresponding to second source code from which the second version of the piece of software was built in generating the second container image, wherein the second commit identifier is a second commit hash;
• obtain the second source code from the second location based on the second commit identifier;
• determine a difference between the first container image and the second container image by comparing the first source code to the second source code;
• and
• generate an output for display indicating the difference between the first container image and the second container image.