-
Notifications
You must be signed in to change notification settings - Fork 26
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add scheduled image builds for improved security #22
Comments
You might want to investigate using https://jenkins.dataverse.org which is a new resource that will be documented in IQSS/dataverse#5725 If you'd like some jobs to be added, I would suggest opening issues at https://github.com/IQSS/dataverse-jenkins/issues |
This should include a regular security scan when building the images. This can be done using Clair as standalone, Anchore or similar. See also blog post on different engines part 1 and part 2. Anchore seems benefical as it also offers scanning for Java libs etc. |
Images should be updated regularly when the base image (currently CentOS) is updated.
Linked builds on Docker Hub only work for non-official images (they might have a lack of resources...), so we need to add this ourselfs.
First idea: use Travis CI, they offer scheduled builds OOB.
The text was updated successfully, but these errors were encountered: