diff --git a/Dockerfile b/Dockerfile index 960012d3dced800e915fcab4b72eaf1c64ff38a0..e7fdf91698d665a81caa70d8f3e5e1080a41d790 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,11 +6,6 @@ FROM node:10.23 as base FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} -LABEL org.opencontainers.image.title="Node.js" \ - org.opencontainers.image.description="Node.js is an open-source, cross-platform, JavaScript runtime environment." \ - org.opencontainers.image.licenses="MIT" \ - org.opencontainers.image.version="10.23" \ - maintainer="ironbank@dsop.io" ENV HOME=/home/node \ USER=node diff --git a/Jenkinsfile b/Jenkinsfile deleted file mode 100644 index 690c44ef3f9861ef18be7c0e15b4bc4b5dfc355e..0000000000000000000000000000000000000000 --- a/Jenkinsfile +++ /dev/null @@ -1,2 +0,0 @@ -@Library('DCCSCR@master') _ -dccscrPipeline(version: "10.23") diff --git a/download.yaml b/download.yaml deleted file mode 100644 index d40330b4ff25ca79b301c1503b1f47c15294906d..0000000000000000000000000000000000000000 --- a/download.yaml +++ /dev/null @@ -1,3 +0,0 @@ -resources: - - url: "docker://docker.io/library/node@sha256:69c6890c8dc83f1cf0b1e5120a918180ed3c1e08b43c981d595377f3462ffcc8" - tag: "node:10.23" diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml new file mode 100644 index 0000000000000000000000000000000000000000..4f2426fce72c9d4a882896c5b2f505de4b94a153 --- /dev/null +++ b/hardening_manifest.yaml @@ -0,0 +1,53 @@ +--- +apiVersion: v1 + +# The repository name in registry1, excluding /ironbank/ +name: "opensource/nodejs/nodejs10" + +# List of tags to push for the repository in registry1 +# The most specific version should be the first tag and will be shown +# on ironbank.dsop.io +tags: +- "10.23" +- "latest" + +# Build args passed to Dockerfile ARGs +args: + BASE_IMAGE: "redhat/ubi/ubi8" + BASE_TAG: "8.3" + +# Docker image labels +labels: + org.opencontainers.image.title: "nodejs10" + ## Human-readable description of the software packaged in the image + org.opencontainers.image.description: "base nodejs 10 image" + ## License(s) under which contained software is distributed + org.opencontainers.image.licenses: "MIT" + ## URL to find more information on the image + org.opencontainers.image.url: "docker.io/library/node@sha256:69c6890c8dc83f1cf0b1e5120a918180ed3c1e08b43c981d595377f3462ffcc8" + ## Name of the distributing entity, organization or individual + org.opencontainers.image.vendor: "node" + org.opencontainers.image.version: "10.23" + ## Keywords to help with search (ex. "cicd,gitops,golang") + mil.dso.ironbank.image.keywords: "node,node10,nodejs,nodejs10" + ## This value can be "opensource" or "commercial" + mil.dso.ironbank.image.type: "opensource" + ## Product the image belongs to for grouping multiple images + mil.dso.ironbank.product.name: "nodejs10" + +# List of resources to make available to the offline build context +resources: +- tag: node:10.23 + url: docker://docker.io/library/node@sha256:69c6890c8dc83f1cf0b1e5120a918180ed3c1e08b43c981d595377f3462ffcc8 + +# List of project maintainers +# FIXME: Fill in the following details for the current container owner in the whitelist +# FIXME: Include any other vendor information if applicable +maintainers: +- email: "cvernooy@oteemo.com" + name: "Christopher Vernooy" + username: "cvernooy" + cht_member: true # FIXME: Uncomment if the maintainer is a member of CHT +# - name: "Christopher Vernooy" +# username: "cvernooy" +# email: "cvernooy@oteemo.com" diff --git a/renovate.json b/renovate.json index f78d2a7971e38b6ac9e8596ef11e9756a2329ed1..ecfba58a0f77af42b9388cfcc09db440865e61d5 100644 --- a/renovate.json +++ b/renovate.json @@ -1,16 +1,24 @@ { - "assignees": ["@sean.melissari"], - "baseBranches": ["development"], + "assignees": [ + "@sean.melissari" + ], + "baseBranches": [ + "development" + ], "packageRules": [ { - "packagePatterns": ["node"], + "packagePatterns": [ + "node" + ], "groupName": "node", "managerBranchPrefix": "" } ], "regexManagers": [ { - "fileMatch": ["^Dockerfile$"], + "fileMatch": [ + "^Dockerfile$" + ], "matchStrings": [ "version=\"(?.*?)\"" ], @@ -18,12 +26,24 @@ "datasourceTemplate": "docker" }, { - "fileMatch": ["^Jenkinsfile$"], + "fileMatch": [ + "^hardening_manifest.yaml$" + ], + "matchStrings": [ + "org\\.opencontainers\\.image\\.version:\\s+\"(?.+?)\"" + ], + "depNameTemplate": "node", + "datasourceTemplate": "docker" + }, + { + "fileMatch": [ + "^hardening_manifest.yaml$" + ], "matchStrings": [ - "version:\\s+\"(?.*?)\"" + "tags:\\s+-\\s+\"(?.+?)\"" ], "depNameTemplate": "node", "datasourceTemplate": "docker" } ] -} +} \ No newline at end of file