Skip to content

Commit

Permalink
feat(Docker): add Secrets, Compose v2, Supply Chain Security, Podman (#…
Browse files Browse the repository at this point in the history
…1301)

* chore(Docker): compose v2 & networking update

- Updates Docker Compose references to use v2 `docker compose` command
- Change ICC recommendation to use network policies  instead of disabling

Signed-off-by: otkd <[email protected]>

* feat(Docker): add Docker Secrets rule

- Following existing syntax adds Rule #13 covering Docker Secrets

Signed-off-by: otkd <[email protected]>

* Apply suggestions from code review

Co-authored-by: Shlomo Zalman Heigh <[email protected]>

* feat(Docker): add Supply Chain Security & Podman

- Merges the linting and container scanning section into a single rule
- Fixes issue in proposed solution in Rule 10 doesn’t actually help implement the suggestion
- Expand rootless mode
- Add high level practices covering Docker supply chain security
- Add Podman as an alternative to Docker for secure defaults

Signed-off-by: otkd <[email protected]>

---------

Signed-off-by: otkd <[email protected]>
Co-authored-by: Shlomo Zalman Heigh <[email protected]>
  • Loading branch information
otkd and szh authored Feb 2, 2024
1 parent 1278883 commit b78e4a6
Showing 1 changed file with 101 additions and 54 deletions.
Loading

0 comments on commit b78e4a6

Please sign in to comment.