Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🤖 Various enhancement to security scans #1100

Merged
merged 4 commits into from
Mar 10, 2023
Merged

🤖 Various enhancement to security scans #1100

merged 4 commits into from
Mar 10, 2023

Conversation

mudler
Copy link
Member

@mudler mudler commented Mar 10, 2023

What this PR does / why we need it: Extracted from #1093

Refactor the docker target. It is now split in base-image and image. the old docker target is equivalent to image. The base-image spits an image with an untouched os-release file so scanners can pick up the original base-image version. I've also removed some dups present in the Earthfile

@netlify
Copy link

netlify bot commented Mar 10, 2023

Deploy Preview for kairos-io ready!

Name Link
🔨 Latest commit a513dae
🔍 Latest deploy log https://app.netlify.com/sites/kairos-io/deploys/640b3098af044b000857c3b3
😎 Deploy Preview https://deploy-preview-1100--kairos-io.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@mudler mudler mentioned this pull request Mar 10, 2023
Signed-off-by: mudler <mudler@c3os.io>
Signed-off-by: mudler <mudler@c3os.io>
Signed-off-by: mudler <mudler@c3os.io>
Signed-off-by: mudler <mudler@c3os.io>
@mudler mudler changed the title 🤖 Keep os-release for security-scans 🤖 Various enhancement to security scans Mar 10, 2023
RUN rm -rf /etc/machine-id && touch /etc/machine-id && chmod 444 /etc/machine-id

# Avoid to accidentally push keys generated by package managers
RUN rm -rf /etc/ssh/ssh_host_*

# Copy flavor-specific overlay files
IF [[ "$FLAVOR" =~ "alpine" ]]
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is a dup.. we already copy in the framework target the same files. It probably was an oversight when doing the framework image refactoring

@mudler mudler requested a review from a team March 10, 2023 13:30
@mudler
Copy link
Member Author

mudler commented Mar 10, 2023

back to business @Itxaka ! :D

@mudler
Copy link
Member Author

mudler commented Mar 10, 2023

works!

@mudler mudler merged commit 87bb182 into master Mar 10, 2023
@mudler mudler deleted the fixup/os-release branch March 10, 2023 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

1 participant