Merge branch 'hardening_manifest' into 'development'

Migrate to hardening_manifest.yaml

See merge request !16

Dockerfile

@@ -7,13 +7,6 @@ ARG UBI_BASE_IMAGE=${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
 FROM ${UBI_BASE_IMAGE} as builder
 
-LABEL name="Ruby" \
-    description="Ruby container based off UBI8" \
-    vendor="OpenSource" \
-    summary="Ruby (Red Hat UBI)" \
-    maintainer="OpenSource" \
-    version="2.7.2"
-
 USER 0
 
 COPY ruby-27.tar.gz gdbm.tar.gz scripts/*.sh /

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline(version: "2.7.2")

download.yaml

----
-resources:
-  - url: https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.2.tar.gz
-    filename: ruby-27.tar.gz
-    validation:
-      type: sha256
-      value: 6e5706d0d4ee4e1e2f883db9d768586b4d06567debea353c796ec45e8321c3d4
-  - url: http://ftp.gnu.org/gnu/gdbm/gdbm-1.18.1.tar.gz
-    filename: gdbm.tar.gz
-    validation:
-      type: sha256
-      value: 86e613527e5dba544e73208f42b78b7c022d4fa5a6d5498bf18c8d6f745b91dc

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/ruby/ruby27"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "2.7.2"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "ruby27"
+  # Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "Ruby container based off UBI8"
+  # License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Ruby"
+  # URL to find more information on the image
+  org.opencontainers.image.url: "www.ruby-lang.org"
+  # Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "Opensource"
+  org.opencontainers.image.version: "2.7.2"
+  # Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "programming,scripting,script,ruby,interpreted"
+  # This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  # Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "ruby"
+
+# List of resources to make available to the offline build context
+resources:
+- filename: ruby-27.tar.gz
+  url: https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.2.tar.gz
+  validation:
+    type: sha256
+    value: 6e5706d0d4ee4e1e2f883db9d768586b4d06567debea353c796ec45e8321c3d4
+- filename: gdbm.tar.gz
+  url: http://ftp.gnu.org/gnu/gdbm/gdbm-1.18.1.tar.gz
+  validation:
+    type: sha256
+    value: 86e613527e5dba544e73208f42b78b7c022d4fa5a6d5498bf18c8d6f745b91dc
+
+# List of project maintainers
+maintainers:
+- email: "josheason@seed-inovations.com"
+  # The name of the current container owner
+  name: "Josh Eason"
+  # The gitlab username of the current container owner
+  username: "jeason"
+  cht_member: true