search

grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications
https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md
Apache License 2.0
699 stars 135 forks source link

Pinpoint debian versions in Dockerfile #551

Closed ooq closed 4 years ago

ooq commented 4 years ago

Use digest instead of latest tag in those Dockerfile, so new Debian releases would not change vulnerability results completely.

However, vulnerability results could still change for the images, as new vulnerabilities are being discovered.

This should make signer integration testing and samples more stable.

ooq commented 4 years ago

cc @donmccasland