Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

✨ Use crane to add hash suggestion to unpinned Docker images #2037

Merged
merged 7 commits into from Jul 19, 2022
Merged

✨ Use crane to add hash suggestion to unpinned Docker images #2037

merged 7 commits into from Jul 19, 2022

Commits on Jul 19, 2022

  1. Use crane to add hash suggestion to unpinned Docker images

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    529008d View commit details
    Browse the repository at this point in the history

  2. Add nil check before dereferencing name for image digest

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    1efab91 View commit details
    Browse the repository at this point in the history

  3. Reformat changes to comply with linter

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    203809a View commit details
    Browse the repository at this point in the history

  4. Add basic remediation for dockerfile pinning

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    cfafacd View commit details
    Browse the repository at this point in the history

  5. Deduplicate remediation code

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    c4a2dd3 View commit details
    Browse the repository at this point in the history

  6. Remove reference to linux/amd64, as crane digest should be universal

    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    e56e743 View commit details
    Browse the repository at this point in the history

  7. add remediation info to scorecard output. switch to using strings.Bui… 

    …lder for more maintainable logic
    @spencerschrock
    spencerschrock committed Jul 19, 2022
    Configuration menu
    Copy the full SHA
    d2df929 View commit details
    Browse the repository at this point in the history