search

FuelLabs / infrastructure

Shared infrastructure templates for Fuel services
15 stars 13 forks source link

implement container image audit solutions #149

Closed rfuelsh closed 6 months ago

rfuelsh commented 1 year ago

scan for vulns during docker image building, and skip publishing to ghcr/ecr if there are any open issues / vulns

rfuelsh commented 1 year ago

Few options we have

https://github.com/marketplace/actions/container-scan

https://github.com/marketplace/actions/anchore-container-scan

https://github.com/aquasecurity/trivy

https://github.com/quay/clair

https://github.com/anchore/grype

Voxelot commented 1 year ago

@tirkesi says grype is good

Voxelot commented 1 year ago

we should test out some of these solutions on a repo

rfuelsh commented 10 months ago

https://github.com/FuelLabs/fuel-core/pull/1637

rfuelsh commented 6 months ago

ticket for new SRE engineer

Voxelot commented 6 months ago

closing ticket as this repo will be archived