Juan's Devcontainer Features:

set of features I use and I think should be included in the registry.

Features

This repository contains a collection of Features.

Name	URL	Description
flux	https://fluxcd.io/flux/installation/	Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration
notation	https://notaryproject.dev/	Notation is a CLI project to add signatures as standard items in the registry ecosystem, and to build a set of simple tooling for signing and verifying these signatures. This should be viewed as similar security to checking git commit signatures, although the signatures are generic and can be used for additional purposes. Notation is an implementation of the Notary v2 specifications.
crane	https://github.com/google/go-containerregistry/blob/main/cmd/crane/README.md	crane is a tool for interacting with remote images and registries.
skopeo	https://github.com/containers/skopeo	skopeo is a command line utility that performs various operations on container images and image repositories. It is install through package managers
kyverno	https://kyverno.io/docs/introduction/	Kyverno (Greek for “govern”) is a policy engine designed specifically for Kubernetes.
cyclonedx	https://cyclonedx.org/	cyclonedx is a command-line tool for working with Software Bill of Materials (SBOM).
Copacelic	https://project-copacetic.github.io/copacetic/website/	Project Copacetic: Directly patch container image vulnerabilities. Copa is a CLI tool written in Go and based on buildkit that can be used to directly patch container images given the vulnerability scanning results from popular tools like Trivy.
Gitleaks	https://gitleaks.io/	Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for detecting secrets, past or present, in your code.
Zarf	https://zarf.dev/	Zarf eliminates the complexity of air gap software delivery for Kubernetes clusters and cloud-native workloads using a declarative packaging strategy to support DevSecOps in offline and semi-connected environments.
jnv	https://github.com/ynqa/jnv	jnv is designed for navigating JSON, offering an interactive JSON viewer and jq filter editor.

flux

Running flux inside the built container will print the help menu of flux.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/flux:1": {}
    }
}

$ flux

notation

Running notation inside the built container will print the help menu of notation.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/notation:1": {}
    }
}

$ notation

crane

Running crane inside the built container will print the help menu of crane.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/crane:1": {}
    }
}

$ crane

skopeo

Running skopeo inside the built container will print the help menu of skopeo.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/skopeo:1": {}
    }
}

$ skopeo

kyverno

Running kyverno inside the built container will print the help menu of kyverno.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/kyverno:1": {}
    }
}

$ kyverno

cyclonedx cli

Running cyclonedx inside the built container will print the help menu of cyclonedx.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/cyclonedx:1": {}
    }
}

$ cyclonedx --version

Copacetic cli

Running copa inside the built container will print the help menu of copa.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/copa:1": {}
    }
}

$ copa

Gitleaks

Running gitleaks inside the built container will print the help menu of gitleaks.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/gitleaks:1": {}
    }
}

$ gitleaks

Zarf

Running zarf inside the built container will print the help menu of zarf.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/zarf:1": {}
    }
}

$ zarf

jnv

Running jnv -h inside the built container will print the help menu of jnv.

{
    "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
    "features": {
        "ghcr.io/jsburckhardt/devcontainer-features/jnv:1": {}
    }
}

$ jnv -h