containerise the application #2

New Issue

2023-01-30T20:03:25+01:00

wanderer commented

2023-01-30 20:03:25 +01:00

as title, have the application available as an OCI container.

this includes:

building images using kaniko
creating a Software Bill of Materials (SBoM) using syft
scanning container image for vulnerabilities using grype
signing container artifacts using cosign

as title, have the application available as an OCI container. this includes: * building images using [`kaniko`](https://github.com/GoogleContainerTools/kaniko) * creating a Software Bill of Materials (SBoM) using [`syft`](https://github.com/anchore/syft) * scanning container image for vulnerabilities using [`grype`](https://github.com/anchore/grype) * signing container artifacts using [`cosign`](https://github.com/sigstore/cosign)

wanderer added this to the brainstorming project 2023-01-30 22:01:16 +01:00

wanderer added this to the 0.0.1 milestone 2023-05-01 21:40:14 +02:00

wanderer commented

2023-05-25 14:15:07 +02:00

checklist:

container file + kaniko builds
SBoM (in releases)
~~~vuln scanning~~~
~~~signing images~~~

checklist: - [x] container file + kaniko builds - [x] SBoM (in releases) - [ ] ~~~vuln scanning~~~ - [ ] ~~~signing images~~~

wanderer closed this issue

2023-08-31 15:59:50 +02:00

This repo is archived. You cannot comment on issues.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mirre-mt/ideas#2