-
-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update codefresh/cli docker tag to v0.88.4 #114
base: master
Are you sure you want to change the base?
Conversation
75c4582
to
8e56726
Compare
8e56726
to
13bfe14
Compare
13bfe14
to
6725dc7
Compare
cd0c180
to
8cb1b67
Compare
8cb1b67
to
b86a389
Compare
b86a389
to
1ea04b0
Compare
1ea04b0
to
451ba77
Compare
451ba77
to
b8c2545
Compare
b8c2545
to
339a29a
Compare
339a29a
to
6079e96
Compare
6079e96
to
9279eea
Compare
9279eea
to
8c13a0f
Compare
8c13a0f
to
f851016
Compare
f851016
to
cafa605
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bridgecrew has found errors in this PR ⬇️
codefresh/pipeline-runner/Dockerfile
Outdated
@@ -1,4 +1,4 @@ | |||
FROM codefresh/cli:0.74.9 | |||
FROM codefresh/cli:0.87.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ensure a user for the container has been created
Resource: /codefresh/pipeline-runner/Dockerfile. | Bridgecrew ID: BC_DKR_3
| Checkov ID: CKV_DOCKER_3
Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.Benchmarks
- CIS DOCKER V1.2 4.1
@@ -1,4 +1,4 @@ | |||
FROM codefresh/cli:0.74.9 | |||
FROM codefresh/cli:0.87.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ensure healthcheck instructions have been added to container images
Resource: /codefresh/pipeline-creator/Dockerfile. | Bridgecrew ID: BC_DKR_2
| Checkov ID: CKV_DOCKER_2
Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.
Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.
Benchmarks
- CIS DOCKER V1.2 4.6
codefresh/pipeline-runner/Dockerfile
Outdated
@@ -1,4 +1,4 @@ | |||
FROM codefresh/cli:0.74.9 | |||
FROM codefresh/cli:0.87.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ensure healthcheck instructions have been added to container images
Resource: /codefresh/pipeline-runner/Dockerfile. | Bridgecrew ID: BC_DKR_2
| Checkov ID: CKV_DOCKER_2
Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.
Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.
Benchmarks
- CIS DOCKER V1.2 4.6
@@ -1,4 +1,4 @@ | |||
FROM codefresh/cli:0.74.9 | |||
FROM codefresh/cli:0.87.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ensure a user for the container has been created
Resource: /codefresh/pipeline-creator/Dockerfile. | Bridgecrew ID: BC_DKR_3
| Checkov ID: CKV_DOCKER_3
Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.Benchmarks
- CIS DOCKER V1.2 4.1
d826f62
to
88fca04
Compare
88fca04
to
af47d8a
Compare
af47d8a
to
445e157
Compare
86c4a52
to
6ddfd15
Compare
6ddfd15
to
b9f9e78
Compare
b9f9e78
to
019adcf
Compare
019adcf
to
fd81036
Compare
fd81036
to
cfa1bd2
Compare
cfa1bd2
to
211fd1d
Compare
211fd1d
to
3f11f1b
Compare
3f11f1b
to
f9fb50b
Compare
f9fb50b
to
c2becfe
Compare
c2becfe
to
a28fa6b
Compare
a28fa6b
to
d3f5282
Compare
d3f5282
to
0ed001d
Compare
0ed001d
to
c116766
Compare
This PR contains the following updates:
0.74.9
->0.88.4
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.