Approval based image copy?

estahn / k8s-image-swapper

Mirror images into your own registry and swap image references automatically.

https://estahn.github.io/k8s-image-swapper/

MIT License

505 stars 41 forks source link

Approval based image copy? #725

Open prein opened 2 months ago

prein commented 2 months ago

Hi, security team would like to use only images we signed and/or approved. Would it be feasible to make the swapper, in addition to copying mage, either:

open a pull request
trigger a GHA workflow
(least effort I guess) call a webhook
check against a list in git ?

estahn commented 2 months ago

You might be able to use the filter config 🤔

Maybe some sort of opposite of filter?