buildsafedev / bsf

Developer-centric tool to secure your software supply chain.
https://buildsafe.dev
Apache License 2.0
72 stars 13 forks source link

redesign `oci` hcl block #99

Closed dr-housemd closed 3 months ago

dr-housemd commented 4 months ago

Currently, oci hcl block has some confusing behaviour.

However, if a user wants to have different entry points for their dev env base image and runtime base image, its not possible.

Also, if a user chooses to build with go hcl block and use a base image, we dont currently support that. I think one way to solve this would be to have a parameter in oci block that can reference to other HCL attributes. This would be similar to terraform's depends_on.

dr-housemd commented 3 months ago

solved with https://github.com/buildsafedev/bsf/pull/112