This sample provides two Dockerfiles
Dockerfile.good
Dockerfile.bad
The good Dockerfile being guarenteed to have no CVEs (it's just scratch) and the bad Dockerfile being an old image which trivy will report to have a critical CVE.
A sample repository used for testing build strategies that check the images for vulnerabilities.
License
shipwright-io/sample-scanning
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A sample repository used for testing build strategies that check the images for vulnerabilities.
Resources
License
Code of conduct
Security policy
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published