UNCLASSIFIED - NO CUI

Chainguard images request: aspnet-runtime, dotnet-sdk

Summary

Request for two new applications in Iron Bank:

Please ignore this issue unless these images will be updated on a regular basis. So far that doesn't seem to be happening with Chainguard images on IronBank.

Reference discussion: https://chat.il2.dso.mil/platform-one/pl/gu3qphg1cprbzmd34rn6u6gpch

You can post an issue on repo1 on one of the chainguard images and make requests directly to them for those two images.

Tasks

Contributor:

  • Add Dockerfile, hardening_manifest.yaml and adhere to Iron Bank requirements
  • Ensure container builds successfully in the Iron Bank pipeline
  • Provide justifications for findings in the VAT
  • Apply the StatusReview label to this issue and wait for feedback
Note: You must mannually apply the StatusReview label in order to have a CHT member review your merge request.

Iron Bank:

  • Merge contributor branch to development
  • Review findings and justifications
  • Merge development to master and close issue

Note: If the above Verification process is rejected for any reason, the Status::Verification label will be removed and the issue will be sent back to Open. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add the Status::Verification label.

Questions?

Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.

Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.

Please read the Iron Bank Documentation for more info

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information