Replace docker resource types with hardened images for pipelines (proxy) - Githubissues

cloud-gov / pages-proxy

Proxies traffic from the Federalist S3 bucket

Other

4 stars 14 forks source link

Replace docker resource types with hardened images for pipelines (proxy) #201

Closed apburnes closed 7 months ago

apburnes commented 8 months ago

To improve our security and compliance posture, we want to update our CI resource types to use cloud.gov's hardened image resources. Look at common-pipelines to determine all of the currently hardened resource images. Some possible images are:

cron-resource
general-task
github-pr-resource
s3-resource
s3-simple-resource
slack-notification-resource
cf-cli-resource
cf-resource
email-resource
git-resource
registry-image-resource
semver-resource
time-resource

Acceptance Criteria

[ ] Updates all relevant CI resource types
[ ] Verify CI jobs and tasks run as expected
[ ] Document the updated resources types