hardening_manifest.yaml

---
apiVersion: v1

# The repository name in registry1, excluding /ironbank/
name: "opensource/wordpress/wordpress"

# List of tags to push for the repository in registry1
# The most specific version should be the first tag and will be shown
# on ironbank.dsop.io
tags:
- "5.7.2"
- "latest"

# Build args passed to Dockerfile ARGs
args:
  BASE_IMAGE: "redhat/ubi/ubi8"
  BASE_TAG: "8.4"

# Docker image labels
labels:
  org.opencontainers.image.title: "wordpress"
  ## Human-readable description of the software packaged in the image
  org.opencontainers.image.description: "WordPress is a free and open source blogging tool and a content management system."
  ## License(s) under which contained software is distributed
  org.opencontainers.image.licenses: "GPL-2.0-or-later"
  ## URL to find more information on the image
  org.opencontainers.image.url: "https://github.com/WordPress/WordPress"
  ## Name of the distributing entity, organization or individual
  org.opencontainers.image.vendor: "WordPress"
  org.opencontainers.image.version: "5.7.2"
  ## Keywords to help with search (ex. "cicd,gitops,golang")
  mil.dso.ironbank.image.keywords: "blog,cms"
  ## This value can be "opensource" or "commercial"
  mil.dso.ironbank.image.type: "opensource"
  ## Product the image belongs to for grouping multiple images
  mil.dso.ironbank.product.name: "WordPress"

# List of resources to make available to the offline build context
resources:
- tag: wordpress:5.7.2
  url: docker://docker.io/library/wordpress@sha256:30a615ff1fe9849ba68d31227646e9a014ba12e8e589ecc2fc5c96eb406b6387
- filename: httpd.tar.gz
  url: https://archive.apache.org/dist/httpd/httpd-2.4.48.tar.gz
  validation:
    type: sha256
    value: 315c0bc50206b866fb17c2cdc28c1973765a8d59ca168b80286e8cb077d0510e
- filename: apr.tar.gz
  url: https://downloads.apache.org/apr/apr-1.7.0.tar.gz
  validation:
    type: sha256
    value: 48e9dbf45ae3fdc7b491259ffb6ccf7d63049ffacbc1c0977cced095e4c2d5a2
- filename: apr-util.tar.gz
  url: https://downloads.apache.org/apr/apr-util-1.6.1.tar.gz
  validation:
    type: sha256
    value: b65e40713da57d004123b6319828be7f1273fbc6490e145874ee1177e112c459
- filename: nghttp2.tar.gz
  url: https://github.com/nghttp2/nghttp2/releases/download/v1.43.0/nghttp2-1.43.0.tar.gz
  validation:
    type: sha256
    value: 45cc3ed91966551f92b31958ceca9b3a9f23ce4faf5cbedb78aa3327cd4e5907
- filename: php.tar.gz
  url: https://github.com/php/php-src/archive/refs/tags/php-7.4.19.tar.gz
  validation:
    type: sha256
    value: 26eee7284b6daca6acd318ed06ae00e053a84abd2cf53935f9ed9d9a39c55179
- filename: re2c.tar.gz
  url: https://github.com/skvadrik/re2c/archive/2.1.1.tar.gz
  validation:
    type: sha256
    value: 6ce465687b0037e49da7b6ffb0ed7f829702ca083c6c5eedbd1a5142e6d7f8fa
- filename: libsodium.tar.gz
  url: https://github.com/jedisct1/libsodium/releases/download/1.0.18-RELEASE/libsodium-1.0.18.tar.gz
  validation:
    type: sha256
    value: 6f504490b342a4f8a4c4a02fc9b866cbef8622d5df4e5452b46be121e46636c1
- filename: bison.tar.gz
  url: https://ftp.gnu.org/gnu/bison/bison-3.7.6.tar.gz
  validation:
    type: sha256
    value: 69dc0bb46ea8fc307d4ca1e0b61c8c355eb207d0b0c69f4f8462328e74d7b9ea 
- filename: texinfo.tar.gz
  url: https://ftp.gnu.org/gnu/texinfo/texinfo-6.7.tar.gz
  validation:
    type: sha256
    value: a52d05076b90032cb2523673c50e53185938746482cf3ca0213e9b4b50ac2d3e
- filename: "imagemagick.tar.gz"
  url: https://github.com/ImageMagick/ImageMagick/archive/refs/tags/7.0.11-14.tar.gz
  validation:
    type: sha256
    value: dfa5aa3f7f289f12c2f9ee6c7c19b02ae857b4eec02f40298f60f5c11048a016
- filename: imagick.tar.gz
  url: https://github.com/Imagick/imagick/archive/3.5.0.tar.gz
  validation:
    type: sha256
    value: f32fb86fefb8531fc32768b9732305f8ada14f249cf3b74c9aaa664c6ae38c27

# List of project maintainers
maintainers:
- name: "Sean Melissari"
  username: "sean.melissari"
  email: "melissari_sean@bah.com"
  cht_member: true