Skip to content

Add chainguard image for EU CRA fix#17

Merged
zahidblackduck merged 11 commits into
mainfrom
dev/zahidblackduck/IDETECT-5086-eu-cra-fix-chainguard
Jul 9, 2026
Merged

Add chainguard image for EU CRA fix#17
zahidblackduck merged 11 commits into
mainfrom
dev/zahidblackduck/IDETECT-5086-eu-cra-fix-chainguard

Conversation

@zahidblackduck

@zahidblackduck zahidblackduck commented May 6, 2026

Copy link
Copy Markdown
Contributor

JIRA Ticket

IDETECT-5086

Description

This pull request aims to secure the docker standard and buildless images by moving to chainguard images targeting the EU CRA.

@zahidblackduck zahidblackduck self-assigned this May 6, 2026

@dterrybd dterrybd left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new template files look right to me. I don't think we want to source the 11.4 files though. That should be done for release auditing purposes and we released 11.4 using the previous Alpine images.

@zahidblackduck zahidblackduck requested a review from dterrybd May 26, 2026 09:25
@zahidblackduck

Copy link
Copy Markdown
Contributor Author

The new template files look right to me. I don't think we want to source the 11.4 files though. That should be done for release auditing purposes and we released 11.4 using the previous Alpine images.

Thanks. Updated as per the review.

#RUN wget -O /detect.jar --server-response ${DETECT_SOURCE}
#
#ENTRYPOINT ["java", "-jar", "/detect.jar", "--detect.source.path=/source", "--detect.output.path=/output", "--detect.phone.home.passthrough.invoked.by.image=true", "--detect.accuracy.required=NONE"]

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you can remove all the lines above this comment

#RUN wget -O /detect.jar --server-response ${DETECT_SOURCE}
#
#ENTRYPOINT ["java", "-jar", "/detect.jar", "--detect.source.path=/source", "--detect.output.path=/output", "--detect.phone.home.passthrough.invoked.by.image=true"]

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same as previous comment

@zahidblackduck zahidblackduck requested review from bd-samratmuk and shantyk and removed request for bd-samratmuk and shantyk July 8, 2026 16:12
@zahidblackduck zahidblackduck merged commit 2d955ac into main Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants