Skip to content
This repository has been archived by the owner on May 28, 2024. It is now read-only.

implement container image audit solutions #149

Closed
rfuelsh opened this issue Sep 4, 2023 · 6 comments
Closed

implement container image audit solutions #149

rfuelsh opened this issue Sep 4, 2023 · 6 comments
Assignees
@cue8it
Labels
security

Comments

@rfuelsh
Copy link
Member

rfuelsh commented Sep 4, 2023

scan for vulns during docker image building, and skip publishing to ghcr/ecr if there are any open issues / vulns
@rfuelsh rfuelsh self-assigned this Sep 4, 2023
@rfuelsh
Copy link
Member Author

rfuelsh commented Oct 16, 2023

Few options we have

https://github.com/marketplace/actions/container-scan

https://github.com/marketplace/actions/anchore-container-scan

https://github.com/aquasecurity/trivy

https://github.com/quay/clair

https://github.com/anchore/grype

@Voxelot
Copy link
Member

Voxelot commented Oct 16, 2023

@tirkesi says grype is good

@Voxelot
Copy link
Member

Voxelot commented Oct 16, 2023

we should test out some of these solutions on a repo

@rfuelsh rfuelsh changed the title research container image audit solutions implement container image audit solutions Oct 20, 2023
@rfuelsh
Copy link
Member Author

rfuelsh commented Feb 7, 2024

FuelLabs/fuel-core#1637

@rfuelsh
Copy link
Member Author

rfuelsh commented May 14, 2024

ticket for new SRE engineer

@rfuelsh rfuelsh assigned cue8it and unassigned rfuelsh May 27, 2024
@Voxelot
Copy link
Member

Voxelot commented May 28, 2024

closing ticket as this repo will be archived

@Voxelot Voxelot closed this as completed May 28, 2024
@Voxelot Voxelot closed this as not planned Won't fix, can't repro, duplicate, stale May 28, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@cue8it cue8it

Labels
security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Voxelot @rfuelsh @cue8it