Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scout: base image policy config for health scores #20535

Merged
merged 1 commit into from
Aug 5, 2024
Merged

scout: base image policy config for health scores #20535

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 10 additions & 3 deletions content/scout/policy/scores.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,12 +108,19 @@
| [Fixable critical and high vulnerabilities](./_index.md#fixable-critical-and-high-vulnerabilities) | 20 |
| [High-profile vulnerabilities](./_index.md#high-profile-vulnerabilities) | 20 |
| [Supply chain attestations](./_index.md#supply-chain-attestations) | 15 |
| [Unapproved base images](./_index.md#unapproved-base-images) | 15 |
| [Unapproved base images](./_index.md#unapproved-base-images) \* | 15 |
| [Outdated base images](./_index.md#outdated-base-images) | 10 |
| [Default non-root user](./_index.md#default-non-root-user) | 5 |
| AGPL v3-licensed software \* | 5 |
| AGPL v3-licensed software \*\* | 5 |

\* _The **AGPL v3-licensed software** policy is a subset of the
\* _The **Unapproved base images** policy used for health score evaluation also
checks that the tags of Docker Official Images use supported tags and, where
applicable, that the Linux distro that the image uses is a supported distro

Check failure on line 118 in content/scout/policy/scores.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'distro'?

Raw Output:
{"message": "[Vale.Spelling] Did you really mean 'distro'?", "location": {"path": "content/scout/policy/scores.md", "range": {"start": {"line": 118, "column": 28}}}, "severity": "ERROR"}

Check failure on line 118 in content/scout/policy/scores.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'distro'?

Raw Output:
{"message": "[Vale.Spelling] Did you really mean 'distro'?", "location": {"path": "content/scout/policy/scores.md", "range": {"start": {"line": 118, "column": 70}}}, "severity": "ERROR"}
version. This is a policy configuration option that's enabled by default for
health score evaluation. For more information, refer to the
[Unapproved base images](/scout/policy/#unapproved-base-images) policy._

\*\* _The **AGPL v3-licensed software** policy is a subset of the
[Copyleft licenses](./_index.md#copyleft-licenses) policy._

### Evaluation
Expand Down