use only approved and verified base images containers

Description

REQ-379: Description of Use Case / Requirement:

 We are shipping container images as our official release artifacts. We need to make sure that we comply with all licenses used in base images. This infeasible when projects use dozen of different base images.

 

But also consider VID-756 comment:

2) We will follow similar step as in the security repo, as we cannot use it directly: As VID is based on tomcat image (today it is FROM tomcat:9.0-jre8-alpine), we will have our base  change to FROM tomcat:9.0-jdk11-openjdk-slim.

Activity

Show:

Former user February 26, 2021 at 3:12 PM

 - Are we good with this item? Can this be closed?

Details

Assignee

Reporter

Fix versions

Priority

Created July 8, 2020 at 8:45 AM
Updated February 26, 2021 at 3:27 PM
Resolved July 8, 2020 at 8:45 AM