Consolidate image paths in registry1
Summary
Per instruction from POP team -
You can have multiple Repo1 git repositories that have the same name: in the hardening_manifest.yaml. This results in two repos that push to the same Registry1 repository.
You NEED to ensure that the tags: list is unique in each git repo. That is, one repo pushes tag 1.1 and the the other repo pushes tag 2.2. Only one image should push the latest tag.
If you change the name: to do this, these will be considered new images from VAT's perspective. It will consider all the findings to be new issues.
Version Information
Current version: (State the current version of the application as you see it)
Updated version: (State the version you would like the application updated to)
Under support: (Is the updated version within the same major version of the application or is this a new major version?)
Definition of Done
Hardening:
-
Container builds successfully -
Container version has been updated in greylist file -
Branch has been merged into development
Justifications:
-
All findings have been justified per the above documentation -
Justifications have been provided to the container hardening team
Approval Process:
-
Peer review from Container Hardening Team -
Findings Approver has reviewed and approved all justifications -
Approval request has been sent to Authorizing Official -
Approval request has been processed by Authorizing Official
/cc @ironbank-notifications/updates