Describe what this PR does
Since we are now pushing to Quay, I noticed that it performs a security scan on the container. The results were rather embarrassing. This PR:
Adds a yum update to fix the out of date packages
Adds a build command that applies "best practices" labels to the container image
Is there anything that requires special attention?
The version tag code is pretty opaque, but I did my best to comment it. The TL;DR is that the commit ID should be considered "build info" so should be appended after a "+" with components separated by dots.
humblec
commented
5 years ago
Describe what this PR does Since we are now pushing to Quay, I noticed that it performs a security scan on the container. The results were rather embarrassing. This PR:
yum updateto fix the out of date packagesIs there anything that requires special attention? The
versiontag code is pretty opaque, but I did my best to comment it. The TL;DR is that the commit ID should be considered "build info" so should be appended after a "+" with components separated by dots.Related issues: Related to #31