estahn / k8s-image-swapper

Mirror images into your own registry and swap image references automatically.

https://estahn.github.io/k8s-image-swapper/

MIT License

540 stars 44 forks source link

Approval based image copy? #725

Open prein opened 6 months ago

prein commented 6 months ago

Hi, security team would like to use only images we signed and/or approved. Would it be feasible to make the swapper, in addition to copying mage, either:

open a pull request
trigger a GHA workflow
(least effort I guess) call a webhook
check against a list in git ?

estahn commented 6 months ago

You might be able to use the filter config 🤔

Maybe some sort of opposite of filter?

prein commented 1 month ago

633 and #751 are IMO related or could be if there's a way to generalize both ideas