entralliance / entr_runtime

ENTR Alliance is an owner-operator led initiative to create open data stack within the clean energy sector. ENTR is a distribution of existing open-source tools, frameworks, and standards, packaged together to accelerate the transition to clean energy. Join us!
http://www.entralliance.com
MIT License
6 stars 3 forks source link

Production deployment pipeline (e.g., security scanning of Docker image). #43

Open jordanperr opened 1 year ago

jordanperr commented 1 year ago

The current CI pipeline (github actions + gcr) does not support container scanning and the images are not signed. Release notes should also be updated in GCR. This ticket is to upgrade the deployment pipeline to make it more secure and more suitable for production deployments.