Skip to content

Commit 564dbe2

Browse files
committed
finos#742: creating docker scan result reporting process for releases
1 parent ce675d5 commit 564dbe2

File tree

3 files changed

+7668
-0
lines changed

3 files changed

+7668
-0
lines changed

securityscanning/README.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
This directory is meant to hold the results of Docker image security scanning
2+
until such time as we can re-enable the Docker scanning GitHub action.
3+
Currently, we are unable to whitelist vulnerabilities that don't apply to our
4+
release or our application, so reported vulnerabilities will keep the Docker
5+
image from publishing. We need to find a new GitHub action that meets
6+
our needs or improve the current one. Until that time, we'll publish the
7+
results of Docker image scans for each release we do in this folder.
8+
9+
Files should be named in such a way to obviously indicate the scanning tool
10+
that was used and the date upon which it was used.

0 commit comments

Comments
 (0)