docker-bench-security/Dockerfile

FROM alpine:3.18@sha256:eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978

LABEL \
  org.label-schema.name="docker-bench-security" \
  org.label-schema.url="https://dockerbench.com" \
  org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git"

RUN apk add --no-cache iproute2 \
    docker-cli \
    dumb-init \
    jq

COPY . /usr/local/bin/

HEALTHCHECK CMD exit 0

WORKDIR /usr/local/bin

ENTRYPOINT [ "/usr/bin/dumb-init", "/bin/sh", "docker-bench-security.sh" ]
CMD [""]
feat: use SHA instead of tags for base image 2023-11-19 21:08:05 +01:00			`FROM alpine:3.18@sha256:eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978`
First version of the CIS Docker Benchmark v1.0.0 2015-05-11 06:08:28 +02:00
feat(dockerfile): update alpine and cleanup the dockerfile Signed-off-by: Maik Ellerbrock <opensource@frapsoft.com> 2017-12-11 00:56:49 +01:00			`LABEL \`
			`org.label-schema.name="docker-bench-security" \`
			`org.label-schema.url="https://dockerbench.com" \`
			`org.label-schema.vcs-url="https://github.com/docker/docker-bench-security.git"`
keep docker updated, shrink image Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com> 2015-12-22 20:46:56 +01:00
Connection to the apk repositories is HTTPS by default 2021-03-16 08:58:57 +01:00			`RUN apk add --no-cache iproute2 \`
update Docker container instructions, remove out-of-date Dockerfiles Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com> 2023-06-03 00:16:31 +02:00			`docker-cli \`
			`dumb-init \`
			`jq`
First version of the CIS Docker Benchmark v1.0.0 2015-05-11 06:08:28 +02:00
Connection to the apk repositories is HTTPS by default 2021-03-16 08:58:57 +01:00			`COPY . /usr/local/bin/`
perf(dockerfile): move copy at the end to improve cache invalidation 2017-12-11 22:14:47 +01:00
refactor(healthcheck): reactivate healthcheck 2017-12-14 00:22:54 +01:00			`HEALTHCHECK CMD exit 0`

refactor(docker): update main dockerfile (copy files directly) Signed-off-by: Maik Ellerbrock <opensource@frapsoft.com> 2017-01-22 01:01:53 +01:00			`WORKDIR /usr/local/bin`
First version of the CIS Docker Benchmark v1.0.0 2015-05-11 06:08:28 +02:00
fix: set docker-bench-security to sh - Set script to execute with sh rather than bash - Set CMD Dockerfile to use /bin/sh 2021-07-06 18:57:57 +02:00			`ENTRYPOINT [ "/usr/bin/dumb-init", "/bin/sh", "docker-bench-security.sh" ]`
enable docker run script options Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com> 2018-05-02 14:52:38 +02:00			`CMD [""]`