This repo contains Dockerfiles for applications that I find useful.
- Upstream repos are monitored and new images will be built an hour after a new release is tagged
- Whenever possible, binaries are hardened and images will be optimized for size
- Pull images from Docker Hub and GitHub Container Registry
- Images are scanned daily using Trivy, Snyk and Anchore. See the GHA workflow
- Workflows use commit hashes and Dockerfiles use digest references in accordance with OpenSSF's Security Scorecard and enforced using Allstar
- Runners are hardened using Step Security's Harden Runner
- Testing
- Container signing
- SBOM generation
Pull requests are welcome.