Skip to content

Commit 48e1d33

Browse files
committed
Add Containerfile.art for ART onboarding in contrib/, update CODEOWNERS and .dockerignore
1 parent 3953837 commit 48e1d33

3 files changed

Lines changed: 43 additions & 0 deletions

File tree

.dockerignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ NOTICE
1212
/book
1313
/contrib
1414
!/contrib/cmd
15+
!/contrib/art
1516
/Documenatation
1617
/etc
1718
/local-dev

CODEOWNERS

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
11
* @quay/clair @quay/clair-maintainers
2+
contrib/art/Containerfile.art @quay/redhat-team

contrib/art/Containerfile.art

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
FROM registry.redhat.io/ubi9/go-toolset:1.25 AS build
2+
3+
WORKDIR /app
4+
COPY . .
5+
6+
RUN GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -mod=mod \
7+
-ldflags="-s -w" \
8+
-o . \
9+
-trimpath \
10+
./cmd/...
11+
12+
FROM registry.redhat.io/ubi9/ubi-minimal:latest
13+
14+
LABEL com.redhat.component="clair-container"
15+
LABEL name="quay/clair-rhel9"
16+
LABEL io.k8s.display-name="Red Hat Quay - Clair"
17+
LABEL io.k8s.description="Clair vulnerability scanner for Red Hat Quay"
18+
LABEL io.openshift.tags="quay,clair,security"
19+
LABEL summary="Clair vulnerability scanner for Red Hat Quay"
20+
LABEL description="Clair vulnerability scanner for Red Hat Quay"
21+
#LABEL cpe="cpe:/a:redhat:quay::el9"
22+
LABEL vendor="Red Hat, Inc."
23+
LABEL distribution-scope="restricted"
24+
LABEL url="https://docs.redhat.com/en/documentation/red_hat_quay"
25+
LABEL maintainer="support@redhat.com"
26+
27+
ENTRYPOINT ["/usr/bin/clair"]
28+
VOLUME /config
29+
EXPOSE 6060
30+
WORKDIR /run
31+
32+
ENV CLAIR_CONF=/config/config.yaml \
33+
CLAIR_MODE=combo \
34+
SSL_CERT_DIR="/etc/ssl/certs:/etc/pki/tls/certs:/var/run/certs"
35+
36+
USER nobody:nobody
37+
38+
COPY --from=build /app/clair /bin/clair
39+
COPY --from=build /app/clairctl /bin/clairctl
40+
ADD https://raw.githubusercontent.com/quay/quay-konflux-components/redhat-3.17/components/clair/data/repository-to-cpe.json /data/
41+
ADD https://raw.githubusercontent.com/quay/quay-konflux-components/redhat-3.17/components/clair/data/container-name-repos-map.json /data/

0 commit comments

Comments
 (0)