New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Scanning Official CKAN Docker Images for vulnerabilities #55

Open

kowh-ai opened this issue Apr 30, 2024 · 0 comments

Contributor

kowh-ai commented Apr 30, 2024 •

edited

Loading

Create GitHub action(s) Workflow to run (maybe nightly) a vulnerability scan on the Official CKAN images in DockerHub

Create a report that can be view manually

What tool (or tools) should we use:

Synk Container
Trivy

Trivy seems to be a one of the better ones after rudimentary analysis of image scanners currently on the market

What about signing an image for added security?

kowh-ai added this to Performance, Developer & Maintainer Experience

kowh-ai moved this to Todo in Performance, Developer & Maintainer Experience

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment