gliderlabs / gliderlabs/docker-alpine

[Security] Make Alpine image compliant with CIS Docker Community Edition Benchmark v1.1.0.

Open
#492 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
5.7k
Forks
530
PR merge metrics
No merged PRs in 30d

Description

Current alpine image is not compliant with CIS Docker Community Edition Benchmark v1.1.0. Section **4 - Container Images and Build File**
Please refer to [docker/docker-bench-security](https://github.com/docker/docker-bench-security.

To reproduce issues

> docker pull alpine:latest

> docker run --net host --pid host --userns host --cap-add audit_control -e DOCKER_CONTENT_TRUST=1 -v /var/lib:/var/lib -v /var/run/docker.sock:/var/run/docker.sock -v /usr/lib/systemd:/usr/lib/systemd -v /etc:/etc --label docker_bench_security docker/docker-bench-security:latest -t "alpine:latest" -e "check_[12367].*|check_5.[1-57-9].*"

Specially, but maybe not only, (COPY should not be used anymore. Use COPY instead.)

> [INFO] 4.9 - Ensure COPY is used instead of ADD in Dockerfile
> [INFO] * ADD in image history: [alpine:latest]

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.