Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: migrate to fully distroless ocm image #1087

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

jakobmoellerdev
Copy link
Contributor

What this PR does / why we need it

Migrates to Distroless which has a few advantages over alpine:

  1. Smaller Base Image
  2. No Package Manager or Shell that could be used to exploit vulnerabilities
  3. Non-Root user by default

I also remove the latest check in alpine since it only fetched a tag anyhow and we should pin by digest

Which issue(s) this PR fixes

@jakobmoellerdev jakobmoellerdev marked this pull request as ready for review November 14, 2024 12:50
@jakobmoellerdev jakobmoellerdev requested a review from a team as a code owner November 14, 2024 12:50
@hilmarf hilmarf added this to the 2024-Q4 milestone Nov 14, 2024
@hilmarf
Copy link
Member

hilmarf commented Nov 14, 2024

What about: https://github.com/open-component-model/ocm/blob/main/Dockerfile ? Shouldn't we change that one as well?

@hilmarf hilmarf self-assigned this Nov 14, 2024
@hilmarf hilmarf self-requested a review November 14, 2024 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: 🆕 ToDo
Development

Successfully merging this pull request may close these issues.

2 participants