-
Hi all,
I'm using `rules_apko` to build our Alpine images, but any that require an apk package not provided by an online mirror doesn't seem to be possible. For instance if I wanted to build a `me…
-
**Question**
Are there any plans to support signing with key pairs?
https://docs.sigstore.dev/key_management/signing_with_self-managed_keys/
https://edu.chainguard.dev/open-source/sigstore/cosign/a…
-
This isssue is basically affecting https://github.com/chainguard-dev/melange, I'm unsure how relevant it is for apko itself.
Responsible code for that is https://github.com/chainguard-dev/apko/blob…
-
Coming here from the results of a supply chain security analysis of this repository that we Orijtech Inc engaged Chainguard Inc, to perform on behalf of the Cosmos ecosystem. The report is at https://…
-
You currently support Debian and Alpine.
More and more people are looking at switching to Wolfi (Chainguard). Last month `trivy` added support for Wolfi https://github.com/aquasecurity/trivy/pull/…
-
**What would you like to be added**:
FIPS 140-2 compliant images.
**Why is this needed**:
At Acquia we’re currently using this component as part of our globally distributed Kubernetes infrastruct…
-
https://github.com/chainguard-dev/apko (disclaimer: a project of my employer, though it's OSS under Apache 2.0) seems like a good fit for this project.
There's also a related tool, https://github.c…
-
**Description**
Introduce a new subcommand something like `resolve-chainguard` or `resolve --chainguard` for `dockerfile` command. It should take Dockerfiles as input and rewrites all the container…
-
See https://github.com/bazelbuild/bazel-central-registry/tree/main/modules/rules_apko
Did the bot stop working?
-
**Describe the bug**
Powerpipe unavoidably crashes when run in a container that doesn't define the `USER` environment variable. Setting `POWERPIPE_INSALL_DIR` doesn't resolve this issue. Setting `U…