buerokratt / POC-DMR.Cross-functional-requirements

Cross-functional requirements to take into account when developing or planning to develop Bürokratt's custom base components
MIT License
1 stars 1 forks source link

Security: Reference Container Image Digests #71

Open guypritchard opened 2 years ago

guypritchard commented 2 years ago

As a Project Architect I WANT TO Ensure that base images being used are the exact images intended SO THAT I know that unexpected code isn't shipped with services which depend on these images.

Note. The Security Documentation talks about this:

Acceptance Criteria

All referenced based images used specify their image digest Sha256 hash in their docker file.

shelabd commented 2 years ago

Strong 3