Enable image scanning for ACK controller images

vijtrip2 commented 2 years ago

Is your feature request related to a problem?

Currently there is no automated way of finding security vulnerabilities in the latest ACK service controller images.

Describe the solution you'd like

Running periodic jobs to scan the latest controller images and if any security vulnerability is surfacing.
ACK core team will be informed about security vulnerability through a private communication channel

Describe alternatives you've considered

TODO: research about managed image scanning from public ecr
Running scan on image of single controller instead of all

acornett21 commented 2 years ago

I think this is a great idea, maybe hook Clair into the existing prow process / infrastructure that ACK team uses? Quay uses this for its scanning. Just a thought so the entire wheel doesn't have to be re-invented for this.

ack-bot commented 2 years ago

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close. Provide feedback via https://github.com/aws-controllers-k8s/community. /lifecycle stale

vijtrip2 commented 2 years ago

/lifecycle frozen

aws-controllers-k8s / community

Enable image scanning for ACK controller images #1122