We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent df96673 commit 626466aCopy full SHA for 626466a
Dockerfile
@@ -39,6 +39,12 @@ FROM registry.access.redhat.com/ubi9/ubi-minimal:${BASE_UBI_IMAGE_TAG} as releas
39
40
COPY --from=build --chown=1001 /app/target_packages /app/target_packages
41
42
+# Image hardening
43
+RUN --mount=type=bind,source=scripts/image_hardening,target=scripts \
44
+ sh scripts/installRemediationTools.sh && \
45
+ sh scripts/remediation-script.sh && \
46
+ sh scripts/removeRemediationTools.sh
47
+
48
ENV SHARED_PACKAGE_PATH="/shared_packages/app/"
49
50
# The entrypoint for this image is designed to follow its usage, i.e
0 commit comments