search

crypto-bug-hunters / bug-buster

🪲 Bug Buster, a bug bounty platform powered by Cartesi Rollups
https://x.com/BugBusterApp
Apache License 2.0
10 stars 13 forks source link

Build the bugbuster image using a distroless approach #142

Open endersonmaia opened 3 months ago

endersonmaia commented 3 months ago

It's good practice for the container ecosystem to have minimal (distroless) images with a reduced attack surface and smaller storage and transfer footprint.

Considering the security aspect of bug-buster, reducing the attack surface is a good objective.

Sugestion

Since we're using Ubuntu as a base image, we could leverage Canonical's chisel tool.

claudioantonio commented 2 months ago

@endersonmaia link for chisel on the description is broken.

guidanoli commented 2 months ago

@endersonmaia link for chisel on the description is broken.

Fixed it. :-)