Skip to content

Security: craig-m/mpcontainer

Security

docs/SECURITY.md

Security Policy

Try to build a secure app, in a secure way. todo: document properly.

Reporting a Vulnerability

Send a pull request? thx

Maintaining

What needs to routinly be updated/patched in this project. Try to document where all assets come from.

  • Each Dockerfile base image version, for example FROM haproxy:2.2.13-alpine.

  • The docker-compose.yaml the cache_from: versions.

  • The Vagrant-dev-vm/Vagrantfile:

    • The config.vm.box_version = "3.2.16" for the boxes
    • A minumum version of vagrant with Vagrant.require_version ">= 2.2.14"
  • Container-web/

    • versions of Jquery, bootstrap, popper.js etc in package.json.
  • Container-pyapp/

    • the python requirements.txt is not versioned, maybe needs to be.
  • Linode terraform

    • In LKE k8s_version = "1.18"
    • In VM the Image, eg ["linode/ubuntu18.04"]
    • In VM, assets, stackscript.sh has docker-compose.

There aren’t any published security advisories