Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to chainguard static base image #1539

Closed
Racer159 opened this issue Apr 2, 2023 · 0 comments · Fixed by #1540
Closed

Switch to chainguard static base image #1539

Racer159 opened this issue Apr 2, 2023 · 0 comments · Fixed by #1540

Comments

@Racer159
Copy link
Contributor

Racer159 commented Apr 2, 2023

Describe what should be investigated or refactored

We should switch to chainguard base images now that they have been out for a while and now that Iron Bank supports them as well

https://edu.chainguard.dev/chainguard/chainguard-images/reference/static/overview/
https://ironbank.dso.mil/repomap/details;registry1Path=chainguard-dev%252Fwolfi%252Fstatic

Links to any relevant code

https://github.com/defenseunicorns/zarf/blob/main/Dockerfile

Additional context

This would help make our images a bit more secure.

@github-project-automation github-project-automation bot moved this to New Requests in Zarf Project Board Apr 2, 2023
Racer159 added a commit that referenced this issue Apr 3, 2023
## Description

This switches the Zarf agent base image to Chainguard static.

## Related Issue

Fixes #1539

## Type of change

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [X] Other (security config, docs update, etc)

## Checklist before merging

- [X] Test, docs, adr added or updated as needed
- [X] [Contributor Guide
Steps](https://github.com/defenseunicorns/zarf/blob/main/CONTRIBUTING.md#developer-workflow)
followed
@github-project-automation github-project-automation bot moved this from New Requests to Done in Zarf Project Board Apr 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant