Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ensure security vulnerabilities are patched in MCR images #233

Merged
merged 22 commits into from
Oct 26, 2023
Merged

Ensure security vulnerabilities are patched in MCR images #233

merged 22 commits into from
Oct 26, 2023

Commits on Aug 24, 2023

  1. copa action integration.

    @Tatsinnit
    Tatsinnit committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    df16967 View commit details
    Browse the repository at this point in the history

  2. Add version number and remove actual publishing of image.

    @Tatsinnit
    Tatsinnit committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    2f484bc View commit details
    Browse the repository at this point in the history

Commits on Aug 25, 2023

  1. Test with non windows image.

    @Tatsinnit
    Tatsinnit committed Aug 25, 2023
    Configuration menu
    Copy the full SHA
    113f5f7 View commit details
    Browse the repository at this point in the history

  2. Test with non windows image.

    @Tatsinnit
    Tatsinnit committed Aug 25, 2023
    Configuration menu
    Copy the full SHA
    ef88925 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2023

  1. update the latest sha. 

    Signed-off-by: Tatsinnit <[email protected]>
    @Tatsinnit
    Tatsinnit committed Sep 25, 2023
    Configuration menu
    Copy the full SHA
    7f2965f View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2023

  1. Revert "update the latest sha." 

    This reverts commit 7f2965f.
    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    51680cd View commit details
    Browse the repository at this point in the history

  2. Only attempt to publish images in same GHCR repo as the code repo

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    50643d7 View commit details
    Browse the repository at this point in the history

  3. show the vulnerability report in the output

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    f751846 View commit details
    Browse the repository at this point in the history

  4. add scanning and patching into GHCR publishing pipeline

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    57a8b7d View commit details
    Browse the repository at this point in the history

  5. add scanning and patching into MCR publishing pipeline

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    bf4a2ab View commit details
    Browse the repository at this point in the history

  6. update scheduled pipeline

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    0ad0952 View commit details
    Browse the repository at this point in the history

  7. fix syntax for output to GH env var in powershell

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    8cd2006 View commit details
    Browse the repository at this point in the history

  8. change to patch MCR, not GHCR

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    536108b View commit details
    Browse the repository at this point in the history

  9. rename GHCR pipeline file for consistency

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    67ece06 View commit details
    Browse the repository at this point in the history

  10. add permission to allow az login

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    c2b969f View commit details
    Browse the repository at this point in the history

  11. fix container registry reference for MCR patch workflow

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    9f978b7 View commit details
    Browse the repository at this point in the history

  12. authenticate to ACR before running trivy scan

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    1718e12 View commit details
    Browse the repository at this point in the history

  13. Ensure docker image exists locally before scanning

    @peterbom
    peterbom committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    aa4d914 View commit details
    Browse the repository at this point in the history

Commits on Oct 6, 2023

  1. Merge GHCR and MCR publishing pipelines into one, to support Copa act… 

    …ion on public image
    @peterbom
    peterbom committed Oct 6, 2023
    Configuration menu
    Copy the full SHA
    288de46 View commit details
    Browse the repository at this point in the history

  2. Add GHCR package write permissions

    @peterbom
    peterbom committed Oct 6, 2023
    Configuration menu
    Copy the full SHA
    3f5d9c5 View commit details
    Browse the repository at this point in the history

  3. move workflow permissions to job level

    @peterbom
    peterbom committed Oct 6, 2023
    Configuration menu
    Copy the full SHA
    b97f5dd View commit details
    Browse the repository at this point in the history

Commits on Oct 18, 2023

  1. update copa action version to one which retries curl command

    @peterbom
    peterbom committed Oct 18, 2023
    Configuration menu
    Copy the full SHA
    3cdc0b4 View commit details
    Browse the repository at this point in the history