search

open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.
https://www.openpolicyagent.org
Apache License 2.0
9.53k stars 1.32k forks source link

Update -debug images to use Chainguard images #5544

Closed charlieegan3 closed 1 year ago

charlieegan3 commented 1 year ago

What is the underlying problem you're trying to solve?

In https://github.com/open-policy-agent/opa/pull/5540 we updated all other flavours of our images to use chainguard base images without OpenSSL. It'd be nice to update the -debug images too because:

Describe the ideal solution

We wait for the Chainguard team to work on this here: https://github.com/chainguard-images/images/issues/187 and then swap out the debug base image.

Additional Context

Sometimes users report feedback from automated scans or security audits which have found OpenSSL in containers. We're keen to remove it from our images since we don't use it.

stale[bot] commented 1 year ago

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days.