search

opendevsecops / terraform-aws-scanner

Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled intervals.
MIT License
44 stars 14 forks source link

Lock containers to specific versions #1

Open pdparchitect opened 5 years ago

pdparchitect commented 5 years ago

At present all container definitions point to :latest tag. For security and resilience we should be locking the definition to specific hash.

pdparchitect commented 5 years ago

An easy way to do this is to use the following command for each container image:

docker image inspect --format='{{index .RepoDigests 0}}' opendevsecops/amass:latest

This can be automated in a script and a tf file generated.