This sample provides two Dockerfiles
Dockerfile.good
Dockerfile.bad
The good Dockerfile being guarenteed to have no CVEs (it's just scratch) and the bad Dockerfile being an old image which trivy will report to have a critical CVE.
-
Notifications
You must be signed in to change notification settings - Fork 1
A sample repository used for testing build strategies that check the images for vulnerabilities.
License
shipwright-io/sample-scanning
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A sample repository used for testing build strategies that check the images for vulnerabilities.
Resources
License
Code of conduct
Security policy
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published