Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make bundler binary auditable #255

Merged
merged 1 commit into from
Jan 22, 2025
Merged

Make bundler binary auditable #255

merged 1 commit into from
Jan 22, 2025

Conversation

garryod
Copy link
Member

@garryod garryod commented Jan 21, 2025

Uses cargo-auditable to build the bundler binary in the Dockerfile, this allows scanners such as trivy (used by stackrox) to interrogate the binary for dependencies and audit them

@garryod garryod added enhancement New feature or request rust Pull request that updates Rust code labels Jan 21, 2025
@garryod garryod requested review from tpoliaw and GDYendell January 21, 2025 16:52
@garryod garryod self-assigned this Jan 21, 2025
@garryod garryod marked this pull request as ready for review January 21, 2025 16:56
@garryod garryod added the docker Pull requests that update Docker code label Jan 21, 2025
@garryod garryod merged commit 25b2404 into main Jan 22, 2025
35 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tpoliaw tpoliaw tpoliaw approved these changes

@GDYendell GDYendell Awaiting requested review from GDYendell

Assignees

@garryod garryod

Labels
docker Pull requests that update Docker code enhancement New feature or request rust Pull request that updates Rust code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@garryod @tpoliaw