@maartje yes! Totally unnecessary….

@jamie @jaykul @sassdawe @DoctorDNS please leave me out this discussion

@jaykul @DoctorDNS @sassdawe i'm not going to convince you guys... Just saying that installing apps when everybody sends you the details of the installer is not that complex.
Building something like this in c++ might be the biggest issue

@DoctorDNS @jaykul @sassdawe I'm saying that I already have like 70% of the functionality in my C# project. They should have built it in C# in the first place... But since that is not the case you can rebuild it in C#. I'm using the Winget repository for something else.
It all comes down to getting the right installer, validating the hash and starting it with the right parameters (which are hidden in the code and sometimes are in the manifest)

@DoctorDNS @sassdawe maybe there is an implementation in the making….. 🤐 https://github.com/svrooij/WingetIntune/tree/feature/ps-module
Winget is all open-source… It depends on what you want to do, but if I can generate the same installer commands, you should be able to create a C# or even pure PowerShell module that does the same as winget.

@alvinashcraft i got so many questions here.
Are they aware of this issue? https://github.com/docker/roadmap/issues/91#issuecomment-1884171418
And apart from that, is the resulting image ARM only or will the resulting image be multi target? Like are you then required to also run it on arm hardware?

@dangoodin i would love to see a PoC of such an attack 🕵️🤩

@sassdawe and in my blog post I show how you can use dependency injection and ILogger to make Powershell even more complete.