dockerfiles
![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/jauderho/dockerfiles/badge)
This repo contains Dockerfiles for applications that I find useful.
- Upstream repos are monitored and new images will be built an hour after a new release is tagged
- Whenever possible, binaries are hardened and images will be optimized for size
- Pull images from GitHub Container Registry (recommended) or Docker Hub
- Images are scanned daily using Trivy, Snyk and Anchore. See the GHA workflow
- Workflows use commit hashes and Dockerfiles use digest references in accordance with OpenSSF's Security Scorecard and enforced using Allstar
- Runners are hardened using Step Security's Harden Runner
- Images are signed and SBOMs included
Contributing
Pull requests are welcome.