GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-18 16:22:33 +01:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #496 from konstruktoid/artifactvalidation

Browse source 
add 4.12 check
This commit is contained in:
Thomas Sjögren 2022-03-07 13:06:06 +01:00 committed by GitHub
commit d44c2a9d47
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
tests/4_container_images.sh
View file

@ -243,6 +243,18 @@ check_4_11() {
logcheckresult "NOTE" logcheckresult "NOTE"
} }
check_4_12() {
local id="4.12"
local desc="Ensure all signed artifacts are validated (Manual)"
local remediation="Validate artifacts signatures before uploading to the package registry."
local remediationImpact="None."
local check="$id - $desc"
starttestjson "$id" "$desc"
note -c "$check"
logcheckresult "NOTE"
}
check_4_end() { check_4_end() {
endsectionjson endsectionjson
} }