containerise the application #2

Closed
opened 2023-01-30 20:03:25 +01:00 by wanderer · 1 comment
Owner

as title, have the application available as an OCI container.

this includes:

  • building images using kaniko
  • creating a Software Bill of Materials (SBoM) using syft
  • scanning container image for vulnerabilities using grype
  • signing container artifacts using cosign
as title, have the application available as an OCI container. this includes: * building images using [`kaniko`](https://github.com/GoogleContainerTools/kaniko) * creating a Software Bill of Materials (SBoM) using [`syft`](https://github.com/anchore/syft) * scanning container image for vulnerabilities using [`grype`](https://github.com/anchore/grype) * signing container artifacts using [`cosign`](https://github.com/sigstore/cosign)
wanderer added this to the brainstorming project 2023-01-30 22:01:16 +01:00
wanderer added this to the 0.0.1 milestone 2023-05-01 21:40:14 +02:00
Author
Owner

checklist:

  • container file + kaniko builds
  • SBoM (in releases)
  • ~~~vuln scanning~~~
  • ~~~signing images~~~
checklist: - [x] container file + kaniko builds - [x] SBoM (in releases) - [ ] ~~~vuln scanning~~~ - [ ] ~~~signing images~~~
This repo is archived. You cannot comment on issues.
No description provided.