virtualroot / docker-hardened Goto Github PK

UID/GID 12123

Add Docker Hub repository descriptions

• https://hub.docker.com/r/virtualroot/hardened-alpine
• https://hub.docker.com/r/virtualroot/hardened-debian
• https://hub.docker.com/r/virtualroot/hardened-ubuntu

Example:

    - name: Docker Hub Description
      uses: peter-evans/dockerhub-description@v3
      with:
        username: ${{ secrets.DOCKERHUB_USERNAME }}
        password: ${{ secrets.DOCKERHUB_PASSWORD }}
        repository: peterevans/dockerhub-description

Removing setuid and setgid permissions in the images can prevent privilege escalation attacks within containers.

RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true

Source: CIS Docker Benchmark v1.6

Only run release workflow when Dockerfile.* and test/** changed. Avoid wasting CPU cycles on GitHub Actions. 🌻

Explore adding annotations and labels.