search

CDLUC3 / dmptool

DMPTool version of the DMPRoadmap codebase
https://dmptool.org
MIT License
56 stars 13 forks source link

Incorporate Trivy scans into build scripts for containers #583

Closed marisastrong closed 1 month ago

marisastrong commented 2 months ago

As we build out containers for DMP infrastructure we should consider including adding trivy to the build process. This will identify any vulnerabilities before images are published or pushed out.

https://github.com/CDLUC3/mrt-doc/issues/1488 - has some information on how the Merritt team did this for their containers

IAS has a new tool to easily review any known vulnerabilities which are included in their trivy scans. Any containers registered in ECR in all AWS accounts that have a known vulnerability will be listed the tool. We can ask Martin to demo at our next IAS meeting

briri commented 1 month ago

moving this to the dmsp_aws_prototype repo