Merge branch 'cfreeman' into 'development'

Cfreeman

See merge request dsop/project-templates/master-project-template!22

Dockerfile

 ARG BASE_REGISTRY=registry1.dso.mil
-ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
-ARG BASE_TAG=8.7
+ARG BASE_IMAGE=ironbank/redhat/ubi/ubi9
+ARG BASE_TAG=9.2
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
@@ -8,6 +8,4 @@ RUN dnf update -y --nodocs && \
     dnf clean all && \
     rm -rf /var/cache/dnf
 
-HEALTHCHECK NONE
-
 USER nobody

hardening_manifest.yaml

@@ -8,8 +8,8 @@ tags:
 - "latest"
 
 args:
-  BASE_IMAGE: "redhat/ubi/ubi8"
-  BASE_TAG: "8.7"
+  BASE_IMAGE: "redhat/ubi/ubi9"
+  BASE_TAG: "9.2"
 
 labels:
   org.opencontainers.image.title: "title"
@@ -18,19 +18,22 @@ labels:
   org.opencontainers.image.url: "https://url"
   org.opencontainers.image.vendor: "vendor"
   org.opencontainers.image.version: "0.0.0"
-  mil.dso.ironbank.image.keywords: "tag1,tag2,tag3"
+  mil.dso.ironbank.image.keywords: " "
   mil.dso.ironbank.image.type: "opensource"
   mil.dso.ironbank.product.name: "name"
 
 resources:
-- filename: 
-  url: 
+- filename: "filename.extension"
+  url: "https://example.com/path/to/file.tar.gz"
   validation:
     type: sha256
-    value: 
+    value: ""
+### For Docker dependencies
+- tag: "product/name:1.0.0"
+  url: "docker://<image-registry>/name/of/product@sha256:<value>"
 
 maintainers:
 - email: "username@example.com"
   name: "FirstName LastName"
   username: "UserName"
-  cht_member: true/false
+  cht_member: false

renovate.json

+# Renovate is an automation tool that Iron Bank leverages to help with auto dependency updates.
+# For more information on renovate, you can view that on the public Iron Bank documentation site here: https://docs-ironbank.dso.mil/hardening/repository-structure/#5-renovatejson and https://docs-ironbank.dso.mil/tutorials/local-renovate-testing/
+# A high level example of how you can use Renovate to help with these automatic dependency updates can be found with Iron Bank's kubernetes-1.27 kube-scheduler: https://repo1.dso.mil/dsop/opensource/kubernetes/1.27/kube-scheduler/-/blob/development/renovate.json 
\ No newline at end of file