Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Periodic job to bump images in sec-scanners-config.yaml #405

Closed
4 tasks
mfaizanse opened this issue Jan 17, 2024 · 1 comment
Closed
4 tasks

Periodic job to bump images in sec-scanners-config.yaml #405

mfaizanse opened this issue Jan 17, 2024 · 1 comment
Labels
area/eventing Issues or PRs related to eventing

Comments

@mfaizanse
Copy link
Member

mfaizanse commented Jan 17, 2024

We need to manually bump the images in sec-scanners-config.yaml on main branch in all of our repositories, which can be automated.
Implement a github action in each of the repositories (eventing-manager, nats-manager and eventing-publisher-proxy) which runs every midnight and checks if the images in the sec-scanners-config.yaml in the respective repository, needs to be bumped or not. If yes, then automatically opens a PR with the bumped images.

Hint: We can reuse stuff from #361.

Question:

  • If we set the image tag to main, will the security scanner always pull the latest tag with main?

AC(s):

  • Periodic job in eventing-manager.
  • Periodic job in nats-manager.
  • Periodic job in eventing-publisher-proxy.
  • Update the duties of security guy to check the jobs every morning.
@mfaizanse mfaizanse added the area/eventing Issues or PRs related to eventing label Jan 17, 2024
@friedrichwilken
Copy link
Contributor

friedrichwilken commented Feb 21, 2024

I think this is no longer needed since in the sec-scanner-config.yaml on main

  1. we want to have the manager-image always to be main.
  2. we want the RC-tag always be updated by releases to the next release, as explained in this ticket

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/eventing Issues or PRs related to eventing
Projects
None yet
Development

No branches or pull requests

2 participants