Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add scheduled image builds for improved security #22

Closed
poikilotherm opened this issue Apr 8, 2019 · 2 comments · Fixed by #105
Closed

Add scheduled image builds for improved security #22

poikilotherm opened this issue Apr 8, 2019 · 2 comments · Fixed by #105
Labels
enhancement New feature or request
Milestone

Comments

@poikilotherm
Copy link
Member

Images should be updated regularly when the base image (currently CentOS) is updated.

Linked builds on Docker Hub only work for non-official images (they might have a lack of resources...), so we need to add this ourselfs.

First idea: use Travis CI, they offer scheduled builds OOB.

@poikilotherm poikilotherm added the enhancement New feature or request label Apr 8, 2019
@pdurbin
Copy link
Member

pdurbin commented Apr 9, 2019

You might want to investigate using https://jenkins.dataverse.org which is a new resource that will be documented in IQSS/dataverse#5725

If you'd like some jobs to be added, I would suggest opening issues at https://github.com/IQSS/dataverse-jenkins/issues

@poikilotherm
Copy link
Member Author

poikilotherm commented Apr 28, 2019

This should include a regular security scan when building the images.

This can be done using Clair as standalone, Anchore or similar. See also blog post on different engines part 1 and part 2.

Anchore seems benefical as it also offers scanning for Java libs etc.

poikilotherm added a commit that referenced this issue Aug 30, 2019
poikilotherm added a commit that referenced this issue Aug 30, 2019
poikilotherm added a commit that referenced this issue Aug 30, 2019
poikilotherm added a commit that referenced this issue Aug 30, 2019
poikilotherm added a commit that referenced this issue Aug 30, 2019
@poikilotherm poikilotherm added this to the v4.16 milestone Sep 19, 2019
poikilotherm added a commit that referenced this issue Oct 16, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants