tomcat9

Dockerfile

-ARG BASE_REGISTRY=registry1.dsop.io
+ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk11
 ARG BASE_TAG=1.11
 
 #FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
-FROM tomcat:9.0.38-jdk11-openjdk AS base
+FROM tomcat:9.0.43-jdk11-openjdk AS base
 
-LABEL org.opencontainers.image.title="tomcat9-openjdk11" \
-      org.opencontainers.image.description="Tomcat9 for OpenJDK11." \
-      org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.version="9.0.38" \
-      maintainer="cht@dsop.io"
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 COPY --from=base /usr/local/tomcat/* /usr/local/tomcat/

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline( version: "9.0.38")

README.md

+## tomcat9-openjdk11
+
+## What is Tomcat?
+
+Apache Tomcat (or simply Tomcat) is an open source web server and servlet container developed by the Apache Software Foundation (ASF). Tomcat implements the Java Servlet and the JavaServer Pages (JSP) specifications from Oracle, and provides a "pure Java" HTTP web server environment for Java code to run in. In the simplest config Tomcat runs in a single operating system process. The process runs a Java virtual machine (JVM). Every single HTTP request from a browser to Tomcat is processed in the Tomcat process in a separate thread.
+
+## Helm Chart
+Link to an example helm chart: https://github.com/helm/charts/tree/master/stable/tomcat
+
+## How to Use this Image
+The default Tomcat environment in the image is:
+CATALINA_BASE:   /usr/local/tomcat
+CATALINA_HOME:   /usr/local/tomcat
+CATALINA_TMPDIR: /usr/local/tomcat/temp
+JRE_HOME:        /usr
+CLASSPATH:       /usr/local/tomcat/bin/bootstrap.jar:/usr/local/tomcat/bin/tomcat-juli.jar
+The configuration files are available in /usr/local/tomcat/conf/. By default, no user is included in the "manager-gui" role required to operate the "/manager/html" web application. If you wish to use this app, you must define such a user in tomcat-users.xml.
+Your application must be placed in the /usr/local/tomcat/webapps directory to be recognized by Tomcat.
\ No newline at end of file

download.yaml

----
-resources:
-  - url: "docker://docker.io/tomcat@sha256:d58d4fe0aa2d4d7b13864fe9d1087f586d25f612cc290dab3dd6858354ca8462"
-    tag: "tomcat/9.0.38-jdk11-openjdk:9.0.38"

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/apache/tomcat-openjdk11"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "9.0.43"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/openjdk/openjdk11"
+  BASE_TAG: "1.11"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "tomcat9-openjdk11"
+  ## Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "Apache Tomcat is an open source implementation of the Java Servlet and JavaServer Pages technologies"
+  ## License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Apache-2.0"
+  ## URL to find more information on the image
+  org.opencontainers.image.url: "https://tomcat.apache.org/"
+  ## Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "opensource"
+  org.opencontainers.image.version: "9.0.43"
+  ## Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "Apache,Tomcat9,tomcat,JDK,server"
+  ## This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  ## Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "Apache"
+
+# List of resources to make available to the offline build context
+resources:
+  - url: "docker://docker.io/tomcat@sha256:6e842c97f38632cc10a7e33b3873827f03f44754a0b45c1b9e320ea97f24dac5"
+    tag: "tomcat:9.0.43-jdk11-openjdk"
+
+# List of project maintainers
+# FIXME: Fill in the following details for the current container owner in the whitelist
+# FIXME: Include any other vendor information if applicable
+maintainers:
+- email: "josheason@seed-innovations.com"
+  name: "Joshua Eason"
+  username: "jeason"
+  cht_member: true 
+