Merge pull request finos#790 from finos/dev

finos#742: creating docker scan results
omesh-omg · Feb 5, 2024 · c33ee51 · c33ee51
2 parents 4dc59e7 + 564dbe2
commit c33ee51
Show file tree

Hide file tree

Showing 3 changed files with 7,668 additions and 0 deletions.
diff --git a/securityscanning/README.md b/securityscanning/README.md
@@ -0,0 +1,10 @@
+This directory is meant to hold the results of Docker image security scanning 
+until such time as we can re-enable the Docker scanning GitHub action.  
+Currently, we are unable to whitelist vulnerabilities that don't apply to our 
+release or our application, so reported vulnerabilities will keep the Docker 
+image from publishing.  We need to find a new GitHub action that meets 
+our needs or improve the current one.  Until that time, we'll publish the 
+results of Docker image scans for each release we do in this folder.
+
+Files should be named in such a way to obviously indicate the scanning tool 
+that was used and the date upon which it was used.