Skip to content
This repository has been archived by the owner on Jan 22, 2024. It is now read-only.

Author CircleCI Orb to Simplify clair-cicd Usage #12

Open
simonsdave opened this issue Jan 12, 2022 · 0 comments
Open

Author CircleCI Orb to Simplify clair-cicd Usage #12

simonsdave opened this issue Jan 12, 2022 · 0 comments
Milestone

Comments

@simonsdave
Copy link
Owner

To use clair-cicd in a CircleCI pipeline the following step is typically authored

- run:
    name: Run docker image vulnerability risk assessment
    command: |
      curl \
        -s \
        -L \
        https://raw.githubusercontent.com/simonsdave/clair-cicd/master/bin/assess-image-risk.sh | \
        bash -s -- --verbose --whitelist 'file://clair-cicd-whitelist-dev-env.json' "${DOCKER_TEMP_IMAGE}"

That's not too bad but an Orb would simplify the above and provide a layer of abstraction so the invocation could be changed and consumers of clair-cicd would not be affected.

See this for how to author an Orb.

@simonsdave simonsdave added this to the Future milestone Jan 12, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant