Skip to content

Scan built docker images using trivy or grype #3177

Closed

Description

@jawnsy

We use AquaSec Trivy in some of our other projects for scanning our source code as well as built containers for possible security issues related to our third-party dependencies (e.g. packages installed with apt-get or yarn), and should consider the same for code-server

This would complement the audit-ci tool that we have already integrated.

Activity

  1. added
    featureNew user visible feature
    ciIssues related to ci
    on Apr 20, 2021
  2. added this to the On Deck milestone on Apr 20, 2021
  3. self-assigned this
    on Apr 29, 2021
  4. modified the milestones: On Deck, v3.9.4 on Apr 29, 2021
  5. added
    choreRelated to maintenance or clean up
    on May 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

choreRelated to maintenance or clean upciIssues related to cifeatureNew user visible feature

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions