Remove unneeded package installs depending on image

[jkuangsc]

Example

FROM python:3.9.18-slim

RUN apt-get update -q -q && \
 apt-get install curl python3 python3-pip

Chainguard recommends removing package installs that already exist on the base image (i.e. listed in their SBOM). Can DFC filter out these installs, ideally checking against that specific image's SBOM?

[jdolitsky]

Good call. Yes the SBOM would give us that info but would require the machine running conversion to have access to registry