Dockerfile

+ARG BASE_REGISTRY=registry1.dso.mil
+ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk8
+ARG BASE_TAG=1.8.0
+
+FROM tomcat:jdk8-openjdk AS base
+
+FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
+
+USER root
+
+COPY --from=base /usr/local/tomcat/ /usr/local/tomcat 
+COPY --from=base /usr/local/openjdk-8/ /usr/local/openjdk-8
+
+RUN dnf -y update && \
+    dnf -y install ca-certificates curl wget gnupg dirmngr git  procps bzip2 unzip fontconfig  p11-kit && \ 
+    set -ex && \
+    set -eux && \
+    rm -rf /var/lib/apt/lists/* && \
+    dnf clean all
+
+ENV JAVA_HOME=/usr/local/openjdk-8
+
+RUN { echo '#/bin/sh'; echo 'echo "$JAVA_HOME"'; } > /usr/local/bin/docker-java-home && \
+    chmod +x /usr/local/bin/docker-java-home && \
+    [ "$JAVA_HOME" = "$(docker-java-home)" ]
+
+ENV PATH=/usr/local/openjdk-8/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ENV LANG=C.UTF-8
+ENV JAVA_VERSION=8u302
+ENV CATALINA_HOME=/usr/local/tomcat
+ENV PATH=/usr/local/tomcat/bin:/usr/local/openjdk-8/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+RUN mkdir -p "$CATALINA_HOME"
+WORKDIR /usr/local/tomcat
+
+ENV TOMCAT_NATIVE_LIBDIR=/usr/local/tomcat/native-jni-lib
+ENV LD_LIBRARY_PATH=/usr/local/tomcat/native-jni-lib
+ENV TOMCAT_MAJOR=9
+ENV TOMCAT_VERSION=9.0.52
+ENV TOMCAT_SHA512=35e007e8e30e12889da27f9c71a6f4997b9cb5023b703d99add5de9271828e7d8d4956bf34dd2f48c7c71b4f8480f318c9067a4cd2a6d76eaae466286db4897b
+
+RUN rm -rf /usr/libexec/openssh/ssh-keysign /usr/share/doc/perl-IO-Socket-SSL/certs/* /usr/share/doc/perl-IO-Socket-SSL/example/* /usr/share/doc/perl-Net-SSLeay/examples/*
+
+EXPOSE 8080
+
+USER 1001
+
+HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 CMD [ "executable" ]
+
+CMD ["catalina.sh", "run"]
\ No newline at end of file

README.md

-# <application name>
+# TOMCAT8-OPENJDK8
 
-Project template for all Iron Bank container repositories.
+The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are developed under the Java Community Process.
\ No newline at end of file
+
+The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project.
+
+The documentation available as of the date of this release is included in the docs webapp which ships with tomcat. You can access that webapp by starting tomcat and visiting http://localhost:8080/docs/ in your browser. The most up-to-date documentation for each version can be found at: https://tomcat.apache.org/tomcat-8.5-doc/
+
+For installation, see https://github.com/apache/tomcat/blob/main/RUNNING.txt for more info
\ No newline at end of file

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/apache/tomcat8-openjdk8"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "9.0.52"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/openjdk/openjdk8"
+  BASE_TAG: "1.8.0"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "tomcat8-openjdk8"
+  ## Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "The Apache Tomcat software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies"
+  ## License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Apache-2.0"
+  ## URL to find more information on the image
+  org.opencontainers.image.url: "http://tomcat.apache.org/"
+  ## Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "Apache"
+  org.opencontainers.image.version: "9.0.52"
+  ## Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "container, Java Servlet, JavaServer, Java Expression Languages, Java WebSocket"
+  ## This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  ## Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "Tomcat"
+
+# List of resources to make available to the offline build context
+resources:
+- tag: tomcat:jdk8-openjdk
+  url: docker://docker.io/tomcat@sha256:a2bfdce4bd77d778642a29cbeb630f924b9487ef9ebe3d6b20acef8e842d9e61
+
+# List of project maintainers
+maintainers:
+- name: "Jacob Rohlman"
+  username: "jacob.rohlman"
+  email: "jacob.rohlman@us.af.mil"
+  cht_member: true

renovate.json

+{
+    "assignees": [
+      "@jacob.rohlman"
+    ],
+    "baseBranches": [
+      "development"
+    ],
+    "automerge": true,
+    "gitLabAutomerge": true,
+    "regexManagers": [
+      {
+        "fileMatch": [
+          "^hardening_manifest.yaml$"
+        ],
+        "matchStrings": [
+          "org\\.opencontainers\\.image\\.version:\\s+\"(?<currentValue>.+?)\""
+        ],
+        "depNameTemplate": "tomcat",
+        "datasourceTemplate": "docker"
+      },
+      {
+        "fileMatch": [
+          "^hardening_manifest.yaml$"
+        ],
+        "matchStrings": [
+          "tags:\\s+-\\s+\"(?<currentValue>.+?)\""
+        ],
+        "depNameTemplate": "tomcat",
+        "datasourceTemplate": "docker"
+      }
+    ]
+  }