[2.x] Updated platforms & testing #27

rennokki · 2022-11-18T08:38:54Z

No description provided.

Updated workflows

Made best possible cleanup;

bridgecrew · 2022-11-28T09:06:48Z

examples/laravel/Dockerfile.octane

@@ -0,0 +1,61 @@
+ARG OCTANE_TAG=octane-a65874dd8e099759ebdd6271caff2ae2513cc65f-4.8-php8.1-alpine


Ensure a user for the container has been created
Resource: /examples/laravel/Dockerfile.octane. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

bridgecrew · 2022-11-28T09:06:50Z

Dockerfile.openswoole

@@ -0,0 +1,60 @@
+ARG BASE_TAG=4.11-php8.1-alpine


Ensure healthcheck instructions have been added to container images
Resource: /Dockerfile.openswoole. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

🎉 Fixed by commit 44e4d8e - Added mixes for swoole and openswoole

bridgecrew · 2022-11-28T09:06:51Z

Dockerfile.octane

@@ -1,56 +1,57 @@
-ARG BASE_TAG=4.6-php8.1-alpine
+ARG BASE_TAG=4.8-php8.1-alpine


Ensure a user for the container has been created
Resource: /Dockerfile.octane. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

🎉 Fixed by commit 44e4d8e - Added mixes for swoole and openswoole

bridgecrew · 2022-11-28T09:06:52Z

Dockerfile.fpm

@@ -1,54 +1,57 @@
 ARG BASE_TAG=8.1-fpm-alpine


Ensure healthcheck instructions have been added to container images
Resource: /Dockerfile.fpm. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

bridgecrew · 2022-11-28T09:06:54Z

Dockerfile.octane

@@ -1,56 +1,57 @@
-ARG BASE_TAG=4.6-php8.1-alpine
+ARG BASE_TAG=4.8-php8.1-alpine


Ensure healthcheck instructions have been added to container images
Resource: /Dockerfile.octane. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

🎉 Fixed by commit 44e4d8e - Added mixes for swoole and openswoole

bridgecrew · 2022-11-28T09:06:55Z

Dockerfile.worker

@@ -1,55 +1,56 @@
 ARG BASE_TAG=8.1-cli-alpine


Ensure healthcheck instructions have been added to container images
Resource: /Dockerfile.worker. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

bridgecrew · 2022-11-28T09:06:56Z

Dockerfile.worker

@@ -1,55 +1,56 @@
 ARG BASE_TAG=8.1-cli-alpine


Ensure a user for the container has been created
Resource: /Dockerfile.worker. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

bridgecrew · 2022-11-28T09:06:57Z

Dockerfile.openswoole

@@ -0,0 +1,60 @@
+ARG BASE_TAG=4.11-php8.1-alpine


Ensure a user for the container has been created
Resource: /Dockerfile.openswoole. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

🎉 Fixed by commit 44e4d8e - Added mixes for swoole and openswoole

bridgecrew · 2022-11-28T09:06:58Z

Dockerfile.fpm

@@ -1,54 +1,57 @@
 ARG BASE_TAG=8.1-fpm-alpine


Ensure a user for the container has been created
Resource: /Dockerfile.fpm. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

bridgecrew · 2022-11-28T09:06:59Z

examples/laravel/Dockerfile.octane

@@ -0,0 +1,61 @@
+ARG OCTANE_TAG=octane-a65874dd8e099759ebdd6271caff2ae2513cc65f-4.8-php8.1-alpine


Ensure healthcheck instructions have been added to container images
Resource: /examples/laravel/Dockerfile.octane. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

bridgecrew

⚠️ Due to ed8768e - Added openswoole - 10 new errors were added

Change details

Error ID	Change	Path	Resource
BC_DKR_2	Added	/Dockerfile.openswoole	/Dockerfile.openswoole.
BC_DKR_2	Added	/Dockerfile.worker	/Dockerfile.worker.
BC_DKR_2	Added	/Dockerfile.octane	/Dockerfile.octane.
BC_DKR_2	Added	/Dockerfile.fpm	/Dockerfile.fpm.
BC_DKR_2	Added	/examples/laravel/Dockerfile.octane	/examples/laravel/Dockerfile.octane.
BC_DKR_3	Added	/Dockerfile.openswoole	/Dockerfile.openswoole.
BC_DKR_3	Added	/Dockerfile.worker	/Dockerfile.worker.
BC_DKR_3	Added	/Dockerfile.octane	/Dockerfile.octane.
BC_DKR_3	Added	/Dockerfile.fpm	/Dockerfile.fpm.
BC_DKR_3	Added	/examples/laravel/Dockerfile.octane	/examples/laravel/Dockerfile.octane.

bridgecrew · 2022-11-29T01:35:53Z

Dockerfile.swoole

@@ -0,0 +1,92 @@
+ARG PHP_TAG=php8.1-cli-alpine3.15


Ensure a user for the container has been created
Resource: /Dockerfile.swoole. | ID: BC_DKR_3

Description
Containers should run as a non-root user. It is good practice to run the container as a non-root user, where possible. This can be done either via the ```USER``` directive in the ```Dockerfile``` or through ```gosu``` or similar where used as part of the ```CMD``` or ```ENTRYPOINT``` directives.
Benchmarks

CIS DOCKER V1.2 4.1

bridgecrew · 2022-11-29T01:35:55Z

Dockerfile.swoole

@@ -0,0 +1,92 @@
+ARG PHP_TAG=php8.1-cli-alpine3.15


Ensure healthcheck instructions have been added to container images
Resource: /Dockerfile.swoole. | ID: BC_DKR_2

Description
We recommend that you add the HEALTHCHECK instruction to your Docker container images to ensure that health checks are executed against running containers.
An important security control is that of availability. Adding the HEALTHCHECK instruction to your container image ensures that the Docker engine periodically checks the running container instances against that instruction to ensure that containers are still operational.

Based on the results of the health check, the Docker engine could terminate containers which are not responding correctly, and instantiate new ones.

Benchmarks

CIS DOCKER V1.2 4.6

bridgecrew

⚠️ Due to 44e4d8e - Added mixes for swoole and openswoole - 2 new errors were added and 4 errors were fixed.

Change details

Error ID	Change	Path	Resource
BC_DKR_2	Added	/Dockerfile.swoole	/Dockerfile.swoole.
BC_DKR_3	Added	/Dockerfile.swoole	/Dockerfile.swoole.
BC_DKR_2	Fixed	/Dockerfile.octane	/Dockerfile.octane.
BC_DKR_3	Fixed	/Dockerfile.octane	/Dockerfile.octane.
BC_DKR_2	Fixed	/Dockerfile.openswoole	/Dockerfile.openswoole.
BC_DKR_3	Fixed	/Dockerfile.openswoole	/Dockerfile.openswoole.

bridgecrew · 2022-11-29T10:07:23Z

Dockerfile.worker

+
+COPY docker-php-cleanup docker-extract-apt /usr/local/bin/
+
+RUN set -eux ; \


Ensure Docker APT is not used
Resource: /Dockerfile.worker.RUN | ID: BC_DKR_NETWORKING_1

bridgecrew · 2022-11-29T10:07:24Z

Dockerfile.swoole

+
+COPY docker-php-cleanup docker-extract-apt /usr/local/bin/
+
+RUN set -eux ; \


Ensure Docker APT is not used
Resource: /Dockerfile.swoole.RUN | ID: BC_DKR_NETWORKING_1

bridgecrew · 2022-11-29T10:07:26Z

Dockerfile.fpm

+
+COPY docker-php-cleanup docker-extract-apt /usr/local/bin/
+
+RUN set -eux ; \


Ensure Docker APT is not used
Resource: /Dockerfile.fpm.RUN | ID: BC_DKR_NETWORKING_1

bridgecrew

⚠️ Due to 6a3db67 - Updated images for slimmer versions - 3 new errors were added

Change details

Error ID	Change	Path	Resource
BC_DKR_NETWORKING_1	Added	/Dockerfile.fpm	/Dockerfile.fpm.RUN
BC_DKR_NETWORKING_1	Added	/Dockerfile.worker	/Dockerfile.worker.RUN
BC_DKR_NETWORKING_1	Added	/Dockerfile.swoole	/Dockerfile.swoole.RUN

rennokki added 20 commits November 18, 2022 10:38

Updated platforms for testing

f27f1e9

Removed 8.2 officials

f39040f

Removed 7.4 entirely

2bf92f9

Updated workflows

Updated missing flows

388bc6a

Removed node/npm, image/gd, mysql_pdo and redis;

b0aa71f

Made best possible cleanup;

Updated readme & docs

4babbb5

Added first octane example

1010f0b

Added set -ex

3d2f368

Updated permissions

0a44a6b

Updated cleanup images

bf29394

Added quiet for deps

6f4d4d9

Removed set -e

06884a3

Waiting for 8.2 to release on Docker

024dfb3

Let PHP source stay

dc27afa

Updated project

ad048da

Updated shebang

648ce34

Removed www-data user

668badd

Added redis as extension

e874400

Fixed octane permissions

75213fa

Added openswoole

ed8768e

bridgecrew bot reviewed Nov 28, 2022

View reviewed changes

Added mixes for swoole and openswoole

44e4d8e

bridgecrew bot reviewed Nov 29, 2022

View reviewed changes

rennokki added 3 commits November 29, 2022 03:36

Typo

5f7615c

Image name typos

3b80ad6

Updated images for slimmer versions

6a3db67

bridgecrew bot reviewed Nov 29, 2022

View reviewed changes

rennokki added 6 commits November 29, 2022 12:22

Updated swoole args & composer installation

4deb770

Removed php call in final iamge

177ccda

Fixed extensions

44a4471

Fixed platform use

a9b78cc

Fixed typo

8a54b38

Using $BUILDPLATFORM for building

67d679e

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[2.x] Updated platforms & testing #27

[2.x] Updated platforms & testing #27

rennokki commented Nov 18, 2022

bridgecrew bot Nov 28, 2022

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022

bridgecrew bot Nov 28, 2022

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022

bridgecrew bot Nov 28, 2022

bridgecrew bot left a comment

bridgecrew bot Nov 29, 2022

bridgecrew bot Nov 29, 2022

bridgecrew bot left a comment

bridgecrew bot Nov 29, 2022

bridgecrew bot Nov 29, 2022

bridgecrew bot Nov 29, 2022

bridgecrew bot left a comment

		@@ -0,0 +1,61 @@
		ARG OCTANE_TAG=octane-a65874dd8e099759ebdd6271caff2ae2513cc65f-4.8-php8.1-alpine

		@@ -1,56 +1,57 @@
		ARG BASE_TAG=4.6-php8.1-alpine
		ARG BASE_TAG=4.8-php8.1-alpine


		COPY docker-php-cleanup docker-extract-apt /usr/local/bin/

		RUN set -eux ; \

[2.x] Updated platforms & testing #27

Are you sure you want to change the base?

[2.x] Updated platforms & testing #27

Conversation

rennokki commented Nov 18, 2022

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022 • edited Loading

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022 • edited Loading

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022 • edited Loading

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022 • edited Loading

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 28, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot left a comment

Choose a reason for hiding this comment

bridgecrew bot Nov 29, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot Nov 29, 2022

Choose a reason for hiding this comment

Description

Benchmarks

bridgecrew bot left a comment

Choose a reason for hiding this comment

bridgecrew bot Nov 29, 2022

Choose a reason for hiding this comment

bridgecrew bot Nov 29, 2022

Choose a reason for hiding this comment

bridgecrew bot Nov 29, 2022

Choose a reason for hiding this comment

bridgecrew bot left a comment

Choose a reason for hiding this comment

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022 •

edited

Loading

bridgecrew bot Nov 28, 2022 •

edited

Loading