| ... | ... | @@ -39,6 +39,12 @@ Dockle is a container linter, which helps you identify if you haven't followed |
|
|
|
1. Certain best practices while building the image
|
|
|
|
1. CIS Benchmarks to secure your docker image
|
|
|
|
|
|
|
|
Trivy Scan
|
|
|
|
|
|
|
|
|
|
|
|
Dockle Scan
|
|
|
|
https://github.com/evydtech/bazel-java/blob/a077b66fc14d1f962e7555747ef435411a7d64f8/Docs/Images/dockle_scan.png
|
|
|
|
|
|
|
|
In case you would like the action to ignore any vulnerabilities and best practice checks, create an allowedlist file at the path `.github/containerscan/allowedlist.yaml` in your repo.
|
|
|
|
|
|
|
|
### Azure Kubernetes Deployment
|
| ... | ... | |
