Affected by GO-2022-0390
and 3 other vulnerabilities
GO-2022-0390: Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
GO-2022-0985: Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions in github.com/docker/docker
GO-2022-1107: Container build can leak any path on the host into the container in github.com/docker/docker
GO-2024-2914: Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing in github.com/docker/docker
TruncateID returns a shorthand version of a string identifier for convenience.
A collision with other shorthands is very unlikely, but possible.
In case of a collision a lookup with TruncIndex.Get() will fail, and the caller
will need to use a langer prefix, or the full-length Id.