Merge branch 'development' into 'master'

hardening manifest

See merge request !17

Dockerfile

@@ -7,13 +7,6 @@ ARG UBI_BASE_IMAGE=${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
 FROM ${UBI_BASE_IMAGE} as builder
 
-LABEL name="Ruby" \
-    description="Ruby container based off UBI8" \
-    vendor="OpenSource" \
-    summary="Ruby (Red Hat UBI)" \
-    maintainer="OpenSource" \
-    version="2.7.2"
-
 USER 0
 
 COPY ruby-27.tar.gz gdbm.tar.gz scripts/*.sh /

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline(version: "2.7.2")

LICENSE.md

-Ruby is copyrighted free software by Yukihiro Matsumoto <matz@netlab.jp>.
-You can redistribute it and/or modify it under either the terms of the
-2-clause BSDL (see the file BSDL), or the conditions below:
-
-  1. You may make and give away verbatim copies of the source form of the
-     software without restriction, provided that you duplicate all of the
-     original copyright notices and associated disclaimers.
-
-  2. You may modify your copy of the software in any way, provided that
-     you do at least ONE of the following:
-
-       a) place your modifications in the Public Domain or otherwise
-          make them Freely Available, such as by posting said
-	  modifications to Usenet or an equivalent medium, or by allowing
-	  the author to include your modifications in the software.
-
-       b) use the modified software only within your corporation or
-          organization.
-
-       c) give non-standard binaries non-standard names, with
-          instructions on where to get the original software distribution.
-
-       d) make other distribution arrangements with the author.
-
-  3. You may distribute the software in object code or binary form,
-     provided that you do at least ONE of the following:
-
-       a) distribute the binaries and library files of the software,
-	  together with instructions (in the manual page or equivalent)
-	  on where to get the original distribution.
-
-       b) accompany the distribution with the machine-readable source of
-	  the software.
-
-       c) give non-standard binaries non-standard names, with
-          instructions on where to get the original software distribution.
-
-       d) make other distribution arrangements with the author.
-
-  4. You may modify and include the part of the software into any other
-     software (possibly commercial).  But some files in the distribution
-     are not written by the author, so that they are not under these terms.
-
-     For the list of those files and their copying conditions, see the
-     file LEGAL.
-
-  5. The scripts and library files supplied as input to or produced as
-     output from the software do not automatically fall under the
-     copyright of the software, but belong to whomever generated them,
-     and may be sold commercially, and may be aggregated with this
-     software.
-
-  6. THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
-     IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
-     WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-     PURPOSE.

download.yaml

----
-resources:
-  - url: https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.2.tar.gz
-    filename: ruby-27.tar.gz
-    validation:
-      type: sha256
-      value: 6e5706d0d4ee4e1e2f883db9d768586b4d06567debea353c796ec45e8321c3d4
-  - url: http://ftp.gnu.org/gnu/gdbm/gdbm-1.18.1.tar.gz
-    filename: gdbm.tar.gz
-    validation:
-      type: sha256
-      value: 86e613527e5dba544e73208f42b78b7c022d4fa5a6d5498bf18c8d6f745b91dc

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "opensource/ruby/ruby27"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "2.7.2"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "ruby27"
+  # Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "Ruby container based off UBI8"
+  # License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Ruby"
+  # URL to find more information on the image
+  org.opencontainers.image.url: "www.ruby-lang.org"
+  # Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "Opensource"
+  org.opencontainers.image.version: "2.7.2"
+  # Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "programming,scripting,script,ruby,interpreted"
+  # This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  # Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "ruby"
+
+# List of resources to make available to the offline build context
+resources:
+- filename: ruby-27.tar.gz
+  url: https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.2.tar.gz
+  validation:
+    type: sha256
+    value: 6e5706d0d4ee4e1e2f883db9d768586b4d06567debea353c796ec45e8321c3d4
+- filename: gdbm.tar.gz
+  url: http://ftp.gnu.org/gnu/gdbm/gdbm-1.18.1.tar.gz
+  validation:
+    type: sha256
+    value: 86e613527e5dba544e73208f42b78b7c022d4fa5a6d5498bf18c8d6f745b91dc
+
+# List of project maintainers
+maintainers:
+- email: "josheason@seed-inovations.com"
+  # The name of the current container owner
+  name: "Josh Eason"
+  # The gitlab username of the current container owner
+  username: "jeason"
+  cht_member: true