Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: Update CI to use hardened resource images #237

Merged
merged 1 commit into from
Feb 15, 2024
Merged

chore: Update CI to use hardened resource images #237

merged 1 commit into from
Feb 15, 2024

Conversation

apburnes
Copy link
Contributor

@apburnes apburnes commented Feb 15, 2024 •
edited
Loading

Closes #236

Changes proposed in this pull request:

  • Adds hardened node, time, git, and docker in docker (dind) images to the resource types and tasks in CI

Security considerations

Add hardened resource type images to CI.

@apburnes apburnes force-pushed the chore-update-ci-resources-to-hardened-images branch from d1ee183 to 74183e7 Compare February 15, 2024 17:14
@apburnes apburnes requested a review from a team February 15, 2024 17:21
svenaas
svenaas reviewed Feb 15, 2024
View reviewed changes
Copy link
Contributor

@svenaas svenaas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we get rid of cogito?

resource_types:
  - name: cogito
    type: docker-image
    check_every: 24h
    source:
      repository: pix4d/cogito

@apburnes apburnes force-pushed the chore-update-ci-resources-to-hardened-images branch from 74183e7 to bb139ee Compare February 15, 2024 17:29
@apburnes apburnes requested a review from svenaas February 15, 2024 17:29
@apburnes apburnes merged commit 68a070f into main Feb 15, 2024
2 checks passed
@apburnes apburnes deleted the chore-update-ci-resources-to-hardened-images branch February 15, 2024 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@svenaas svenaas svenaas approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Replace docker resource types with hardened images for pipelines (redirects)
2 participants
@apburnes @svenaas