Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build: Add integrity pinning to Docker build images #9115

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

build: Add integrity pinning to Docker build images #9115

wants to merge 4 commits into from

Commits on Sep 18, 2024

  1. build: Add integrity pinning to Docker bookworm images with SHA256 hash 

    To improve integrity security of builds, a SHA256 hash is added to the
Docker image used for release compilation.

Pinning the image to a SHA256 hash reduced need to trust Dockerhub or
transport security.
    @nehhen
    nehhen committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    eafd370 View commit details
    Browse the repository at this point in the history

  2. build: Add integrity pinning to Docker Alpine images with SHA256 hash 

    To improve integrity security of builds, a SHA256 hash is added to the
Docker image used for release compilation.

Pinning the image to a SHA256 hash reduced need to trust Dockerhub or
transport security.
    @nehhen
    nehhen committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    e7f66a9 View commit details
    Browse the repository at this point in the history

  3. build: Add integrity pinning to Docker golang base image with SHA256 … 

    …hash

To improve integrity security of builds, a SHA256 hash is added to the
Docker image used for release compilation.

Pinning the image to a SHA256 hash reduced need to trust Dockerhub or
transport security.
    @nehhen
    nehhen committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    42d2e24 View commit details
    Browse the repository at this point in the history

  4. chore: remove unused Travis references, correct file-location typo 

    Project no longer uses Travis. [skip ci]
    @nehhen
    nehhen committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    3e0b8b2 View commit details
    Browse the repository at this point in the history