This repo contains Dockerfiles for applications that I find useful.
- Upstream repos are monitored and new images will be built an hour after a new release is tagged
- Whenever possible, binaries are hardened and images will be optimized for size
- Pull images from GitHub Container Registry (recommended) or Docker Hub
- Images are scanned daily using Trivy, Snyk and Anchore. See the GHA workflow
- Workflows use commit hashes and Dockerfiles use digest references in accordance with OpenSSF's Security Scorecard and enforced using Allstar
- Runners are hardened using Step Security's Harden Runner
- Images are signed and SBOMs included
Image | Version | Pulls | Size |
---|---|---|---|
Pull requests are welcome.