diff --git a/Dockerfile b/Dockerfile index 8f868e1ee965d663b0f7b549d28d56ab203bfc37..583d52d01f129cab48497e1447e69328cd5148bd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -41,9 +41,6 @@ ENTRYPOINT ["tini", "--", "/usr/local/bin/launch.sh"] HEALTHCHECK --interval=5m --timeout=3s \ CMD curl -fsL ${JENKINS_URL}/login || exit 1 -LABEL securitytxt="https://www.cloudbees.com/.well-known/security.txt" -LABEL release=39e96b82ab7adf049eac0aacdb3c432f51abaf1b -LABEL version=2.263.1.2 ARG TARBALL=files.tar ADD ${TARBALL} / @@ -65,7 +62,3 @@ ENV VOLUME_SERVICE=http://localhost:31080 ENV TENANT=cjoc ENV JENKINS_VARIANT=cjoc -LABEL name="CloudBees CI Operation Center" \ - vendor="CloudBees, Inc." \ - summary="CloudBees CI is the continuous delivery platform architected for the enterprise" \ - description="This container image will deploy one instance of CloudBees CI Operations Center." diff --git a/Jenkinsfile b/Jenkinsfile deleted file mode 100644 index 05c1f6b43785650e01b21f434e8517cef8de7447..0000000000000000000000000000000000000000 --- a/Jenkinsfile +++ /dev/null @@ -1,2 +0,0 @@ -@Library('DCCSCR@master') _ -dccscrPipeline(version: '2.263.1.2') diff --git a/download.json b/download.json deleted file mode 100644 index 434ca9386adbc980096d80d3b9a933eee49f16c0..0000000000000000000000000000000000000000 --- a/download.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "resources": [ - { - "url": "https://downloads.cloudbees.com/dsop-files/core-oc-files-0aefab0f8d3d18886ab7e143939eeec200a193b7de109941346886993646ad14.tar", - "filename": "files.tar", - "validation": { - "type": "sha256", - "value": "0aefab0f8d3d18886ab7e143939eeec200a193b7de109941346886993646ad14" - } - } - ] -} diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml new file mode 100644 index 0000000000000000000000000000000000000000..8d3fc8613001bd5c5d87d718e7a9cd13dc7dfc91 --- /dev/null +++ b/hardening_manifest.yaml @@ -0,0 +1,58 @@ +--- +apiVersion: v1 + +# The repository name in registry1, excluding /ironbank/ +name: "cloudbees/core/core-oc" + +# List of tags to push for the repository in registry1 +# The most specific version should be the first tag and will be shown +# on ironbank.dsop.io +tags: +- "2.263.1.2" +- "latest" + +# Build args passed to Dockerfile ARGs +args: + BASE_IMAGE: "redhat/openjdk/openjdk8-devel" + BASE_TAG: "1.8.0" + +# Docker image labels +labels: + org.opencontainers.image.title: "core-oc" + ## Human-readable description of the software packaged in the image + # org.opencontainers.image.description: "FIXME" + ## License(s) under which contained software is distributed + # org.opencontainers.image.licenses: "FIXME" + ## URL to find more information on the image + # org.opencontainers.image.url: "FIXME" + ## Name of the distributing entity, organization or individual + # org.opencontainers.image.vendor: "FIXME" + org.opencontainers.image.version: "2.263.1.2" + ## Keywords to help with search (ex. "cicd,gitops,golang") + # mil.dso.ironbank.image.keywords: "FIXME" + ## This value can be "opensource" or "commercial" + # mil.dso.ironbank.image.type: "FIXME" + ## Product the image belongs to for grouping multiple images + # mil.dso.ironbank.product.name: "FIXME" + +# List of resources to make available to the offline build context +resources: +- filename: files.tar + url: https://downloads.cloudbees.com/dsop-files/core-oc-files-0aefab0f8d3d18886ab7e143939eeec200a193b7de109941346886993646ad14.tar + validation: + type: sha256 + value: 0aefab0f8d3d18886ab7e143939eeec200a193b7de109941346886993646ad14 + +# List of project maintainers +# FIXME: Fill in the following details for the current container owner in the whitelist +# FIXME: Include any other vendor information if applicable +maintainers: +- email: "jglick@cloudbees.com" +# # The name of the current container owner +# name: "FIXME" +# # The gitlab username of the current container owner +# username: "FIXME" +# cht_member: true # FIXME: Uncomment if the maintainer is a member of CHT +# - name: "FIXME" +# username: "FIXME" +# email: "FIXME"