Sync Latest Updates from Team RapidFort

Signed-off-by: RapidFort Sync Bot <[email protected]>
rapidfort · Oct 28, 2024 · 466e960 · 466e960
1 parent 54b8445
commit 466e960
Show file tree

Hide file tree

Showing 20 changed files with 217 additions and 46 deletions.
diff --git a/community_images/ansible-operator/ironbank/image.yml b/community_images/ansible-operator/ironbank/image.yml
@@ -34,7 +34,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/ansible/ansible-operator:
-      input_base_tag: "v1.35."
+      input_base_tag: "v1.36."
       output_repo: ansible-operator-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/docker/official/image.yml b/community_images/docker/official/image.yml
@@ -0,0 +1,33 @@
+name: docker
+official_name: Docker
+official_website: https://docker.com
+source_image_provider: The Docker Community
+source_image_repo: docker.io/library/docker
+source_image_repo_link: https://hub.docker.com/_/docker
+source_image_readme: https://github.com/docker-library/docker/blob/master/README.md
+rf_docker_link: rapidfort/docker
+image_workflow_name: docker_official
+github_location: docker/official
+report_url: https://us01.rapidfort.com/app/community/imageinfo/docker.io%2Flibrary%2Fdocker
+usage_instructions: |
+  $ docker run -d --name my-docker rapidfort/docker:tag
+what_is_text: |
+  Docker is an open-source project that automates the deployment of applications inside software containers, by providing an additional layer of abstraction and automation of operating-system-level virtualization on Linux, Mac OS and Windows.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+input_registry:
+  registry: docker.io
+  account: library
+is_locked: "False"
+repo_sets:
+  - docker:
+      input_base_tag: "27.3.*-cli-alpine3.*"
+      output_repo: docker
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      docker:
+        repository: "DOCKER_IMAGE_REPOSITORY"
+        tag: "DOCKER_IMAGE_TAG"
diff --git a/community_images/elasticsearch/bitnami/image.yml b/community_images/elasticsearch/bitnami/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - elasticsearch:
-      input_base_tag: "7.17.24-debian-12-r"
+      input_base_tag: "7.17.25-debian-12-r"
   - elasticsearch:
       input_base_tag: "8.15.3-debian-12-r"
 runtimes:

diff --git a/community_images/envoy/bitnami/image.yml b/community_images/envoy/bitnami/image.yml
@@ -31,6 +31,8 @@ repo_sets:
       input_base_tag: "1.30.6-debian-12-r"
   - envoy:
       input_base_tag: "1.31.2-debian-12-r"
+  - envoy:
+      input_base_tag: "1.32.0-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/ghost/bitnami/image.yml b/community_images/ghost/bitnami/image.yml
@@ -19,12 +19,13 @@ what_is_text: |
 disclaimer: |
   Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
 is_locked: "False"
+use_rapid_stub: true
 input_registry:
   registry: docker.io
   account: bitnami
 repo_sets:
   - ghost:
-      input_base_tag: "5.97.0-debian-12-r"
+      input_base_tag: "5.97.3-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/grafana/ironbank/image.yml b/community_images/grafana/ironbank/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/grafana/grafana:
-      input_base_tag: "11.2."
+      input_base_tag: "11.3."
       output_repo: grafana-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/mariadb/official/image.yml b/community_images/mariadb/official/image.yml
@@ -17,38 +17,38 @@ disclaimer: |
   Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
 is_locked: "False"
 docker_links:
-  - "[`11.4.1-rc-jammy`, `11.4-rc-jammy`, `11.4.1-rc`, `11.4-rc`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/11.4/Dockerfile)"
-  - "[`11.3.2-jammy`, `11.3-jammy`, `11-jammy`, `jammy`, `11.3.2`, `11.3`, `11`, `latest`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/11.3/Dockerfile)"
-  - "[`11.2.3-jammy`, `11.2-jammy`, `11.2.3`, `11.2`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/11.2/Dockerfile)"
-  - "[`11.1.4-jammy`, `11.1-jammy`, `11.1.4`, `11.1`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/11.1/Dockerfile)"
-  - "[`11.0.5-jammy`, `11.0-jammy`, `11.0.5`, `11.0`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/11.0/Dockerfile)"
-  - "[`10.11.7-jammy`, `10.11-jammy`, `10-jammy`, `lts-jammy`, `10.11.7`, `10.11`, `10`, `lts`](https://github.com/MariaDB/mariadb-docker/blob/d7a950d41e9347ac94ad2d2f28469bff74858db7/10.11/Dockerfile)"
+  - "[`11.6.1-noble-rc`, `11.6-noble-rc`, `11.6.1-rc`, `11.6-rc`](https://github.com/MariaDB/mariadb-docker/blob/275297af91e85af864e70c70ce2a650ec128db9c/11.6/Dockerfile)"
+  - "[`11.5.2-noble`, `11.5-noble`, `11-noble`, `noble`, `11.5.2`, `11.5`, `11`, `latest`](https://github.com/MariaDB/mariadb-docker/blob/275297af91e85af864e70c70ce2a650ec128db9c/11.5/Dockerfile)"
+  - "[`11.4.3-noble`, `11.4-noble`, `lts-noble`, `11.4.3`, `11.4`, `lts`](https://github.com/MariaDB/mariadb-docker/blob/ee80a97d5cc2fd4f8779dbfedeb8fc8c47941812/11.4/Dockerfile)"
+  - "[`11.2.5-jammy`, `11.2-jammy`, `11.2.5`, `11.2`](https://github.com/MariaDB/mariadb-docker/blob/ee80a97d5cc2fd4f8779dbfedeb8fc8c47941812/11.2/Dockerfile)"
+  - "[`11.1.6-jammy`, `11.1-jammy`, `11.1.6`, `11.1`](https://github.com/MariaDB/mariadb-docker/blob/ee80a97d5cc2fd4f8779dbfedeb8fc8c47941812/11.1/Dockerfile)"
+  - "[`10.11.9-jammy`, `10.11-jammy`, `10-jammy`, `10.11.9`, `10.11`, `10`](https://github.com/MariaDB/mariadb-docker/blob/ee80a97d5cc2fd4f8779dbfedeb8fc8c47941812/10.11/Dockerfile)"
 input_registry:
   registry: docker.io
   account: library
 repo_sets:
   - mariadb:
-      input_base_tag: "10.11.*"
+      input_base_tag: "10.11.*-jammy"
       output_repo: mariadb-official
   - mariadb:
-      input_base_tag: "11.0.*"
+      input_base_tag: "11.1.*-jammy"
       output_repo: mariadb-official
   - mariadb:
-      input_base_tag: "11.1.*"
+      input_base_tag: "11.2.*-jammy"
       output_repo: mariadb-official
   - mariadb:
-      input_base_tag: "11.2.*"
+      input_base_tag: "11.4.*-noble"
       output_repo: mariadb-official
   - mariadb:
-      input_base_tag: "11.3.*"
+      input_base_tag: "11.5.*-noble"
       output_repo: mariadb-official
   - mariadb:
-      input_base_tag: "11.4.*"
+      input_base_tag: "11.6.*-noble-rc"
       output_repo: mariadb-official
 runtimes:
   - type: docker
     script: docker_coverage.sh
-    wait_time_sec: 60
+    wait_time_sec: 10
     mariadb-official:
       exec_command: --default-authentication-plugin=mysql_native_password
       environment:

diff --git a/community_images/metabase/ironbank/image.yml b/community_images/metabase/ironbank/image.yml
@@ -21,7 +21,7 @@ input_registry:
 is_locked: "False"
 repo_sets:
   - opensource/metabase/metabase:
-      input_base_tag: "v0.50."
+      input_base_tag: "v0.51."
       output_repo: metabase-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/mongodb/bitnami/image.yml b/community_images/mongodb/bitnami/image.yml
@@ -25,9 +25,9 @@ input_registry:
   account: bitnami
 repo_sets:
   - mongodb:
-      input_base_tag: "7.0.14-debian-12-r"
+      input_base_tag: "7.0.15-debian-12-r"
   - mongodb:
-      input_base_tag: "8.0.1-debian-12-r"
+      input_base_tag: "8.0.3-debian-12-r"
 runtimes:
   - type: k8s
     script: k8s_coverage.sh

diff --git a/community_images/prometheus/bitnami/image.yml b/community_images/prometheus/bitnami/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - prometheus:
-      input_base_tag: "2.54.1-debian-12-r"
+      input_base_tag: "2.55.0-debian-12-r"
 runtimes:
   - type: k8s
     script: k8s_coverage.sh

diff --git a/community_images/prometheus/ironbank/image.yml b/community_images/prometheus/ironbank/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/prometheus/prometheus:
-      input_base_tag: "v2.54."
+      input_base_tag: "v2.55."
       output_repo: prometheus-ib
 runtimes:
   - type: k8s

diff --git a/community_images/rabbitmq/official/image.yml b/community_images/rabbitmq/official/image.yml
@@ -30,6 +30,7 @@ runtimes:
   - type: docker_compose
     script: dc_coverage.sh
     compose_file: docker-compose.yml
+    wait_time_sec: 55
     image_keys:
       rabbitmq-official:
         repository: "RABBITMQ_IMAGE_REPOSITORY"

diff --git a/community_images/redis/official/image.yml b/community_images/redis/official/image.yml
@@ -17,41 +17,37 @@ disclaimer: |
   Disclaimer: Redis is a registered trademark of Redis Labs Ltd. Any rights therein are reserved to Redis Labs Ltd. Any use by RapidFort is for referential purposes only and does not indicate any sponsorship, endorsement, or affiliation between Redis Labs Ltd.
 is_locked: "False"
 docker_links:
-  - "[`7.2.4`, `7.2`, `7`, `latest`, `7.2.4-bookworm`, `7.2-bookworm`, `7-bookworm`, `bookworm`](https://github.com/docker-library/redis/blob/b77450d34ae54354f41970fc44bf840353f59ef4/7.2/debian/Dockerfile)"
-  - "[`7.2.4-alpine`, `7.2-alpine`, `7-alpine`, `alpine`, `7.2.4-alpine3.19`, `7.2-alpine3.19`, `7-alpine3.19`, `alpine3.19`](https://github.com/docker-library/redis/blob/b77450d34ae54354f41970fc44bf840353f59ef4/7.2/alpine/Dockerfile)"
-  - "[`7.0.15`, `7.0`, `7.0.15-bookworm`, `7.0-bookworm`](https://github.com/docker-library/redis/blob/313fd068a6751fd9f611e94addfa9ea56a23a3a7/7.0/debian/Dockerfile)"
-  - "[`7.0.15-alpine`, `7.0-alpine`, `7.0.15-alpine3.19`, `7.0-alpine3.19`](https://github.com/docker-library/redis/blob/313fd068a6751fd9f611e94addfa9ea56a23a3a7/7.0/alpine/Dockerfile)"
-  - "[`6.2.14`, `6.2`, `6`, `6.2.14-bookworm`, `6.2-bookworm`, `6-bookworm`](https://github.com/docker-library/redis/blob/76c393fd8ac537201fe4bc4f200b4b5daee03f24/6.2/debian/Dockerfile)"
-  - "[`6.2.14-alpine`, `6.2-alpine`, `6-alpine`, `6.2.14-alpine3.19`, `6.2-alpine3.19`, `6-alpine3.19`](https://github.com/docker-library/redis/blob/531cfa59d944bbbfb22b8228646d12c926dfc010/6.2/alpine/Dockerfile)"
-  - "[`6.0.20`, `6.0`, `6.0.20-bookworm`, `6.0-bookworm`](https://github.com/docker-library/redis/blob/76c393fd8ac537201fe4bc4f200b4b5daee03f24/6.0/debian/Dockerfile)"
-  - "[`6.0.20-alpine`, `6.0-alpine`, `6.0.20-alpine3.19`, `6.0-alpine3.19`](https://github.com/docker-library/redis/blob/ac5605ebe2e7b4b371edcf94ad06e873986a6b63/6.0/alpine/Dockerfile)"
+  - "[`8.0-M01`, `8.0-M01-bookworm`](https://github.com/redis/docker-library-redis/blob/1b88507c82861395a5c1b354baab795c73c051e3/debian/Dockerfile)"
+  - "[`7.4.1`, `7.4`, `7`, `latest`, `7.4.1-bookworm`, `7.4-bookworm`, `7-bookworm`, `bookworm`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/7.4/debian/Dockerfile)"
+  - "[`7.4.1-alpine`, `7.4-alpine`, `7-alpine`, `alpine`, `7.4.1-alpine3.20`, `7.4-alpine3.20`, `7-alpine3.20`, `alpine3.20`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/7.4/alpine/Dockerfile)"
+  - "[`7.2.6`, `7.2`, `7.2.6-bookworm`, `7.2-bookworm`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/7.2/debian/Dockerfile)"
+  - "[`7.2.6-alpine`, `7.2-alpine`, `7.2.6-alpine3.20`, `7.2-alpine3.20`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/7.2/alpine/Dockerfile)"
+  - "[`6.2.16`, `6.2`, `6`, `6.2.16-bookworm`, `6.2-bookworm`, `6-bookworm`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/6.2/debian/Dockerfile)"
+  - "[`6.2.16-alpine`, `6.2-alpine`, `6-alpine`, `6.2.16-alpine3.20`, `6.2-alpine3.20`, `6-alpine3.20`](https://github.com/redis/docker-library-redis/blob/e5650da99bb377b2ed4f9f1ef993ff24729b1c16/6.2/alpine/Dockerfile)"
 input_registry:
   registry: docker.io
   account: library
 repo_sets:
-  - redis:
-      input_base_tag: "6.0.*-alpine"
-      output_repo: redis-official
-  - redis:
-      input_base_tag: "6.0.*-bookworm"
-      output_repo: redis-official
   - redis:
       input_base_tag: "6.2.*-alpine"
       output_repo: redis-official
   - redis:
       input_base_tag: "6.2.*-bookworm"
       output_repo: redis-official
   - redis:
-      input_base_tag: "7.0.*-alpine"
+      input_base_tag: "7.2.*-alpine"
+      output_repo: redis-official
+  - redis:
+      input_base_tag: "7.2.*-bookworm"
       output_repo: redis-official
   - redis:
-      input_base_tag: "7.0.*-bookworm"
+      input_base_tag: "7.4.*-alpine"
       output_repo: redis-official
   - redis:
-      input_base_tag: "7.2.*-alpine"
+      input_base_tag: "7.4.*-bookworm"
       output_repo: redis-official
   - redis:
-      input_base_tag: "7.2.*-bookworm"
+      input_base_tag: "8.0.*-alpine"
       output_repo: redis-official
 runtimes:
   - type: docker_compose
@@ -61,6 +57,3 @@ runtimes:
       redis-official:
         repository: "REDIS_IMAGE_REPOSITORY"
         tag: "REDIS_IMAGE_TAG"
-  - type: docker
-    script: docker_coverage.sh
-    redis-official: {}
diff --git a/community_images/shellcheck/official/README.md b/community_images/shellcheck/official/README.md
@@ -0,0 +1,71 @@
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_logo.png" alt="RapidFort" width="200" />
+</a>
+
+<br>
+
+[![DH Image][dh-rf-badge]][rf-dh-image-link]
+[![Slack][slack-badge]][slack-link]
+
+<b>Near Zero CVE images available at <a style="color:blue;" href="https://hub.rapidfort.com/repositories">hub.rapidfort.com/repositories</a>.</b>
+
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/critical_button.png" alt="⚠️ CRITICAL NOTICE" width="150" /> <br>
+<b>As of 7/2024 community-images will be gated. Please register for free at <a style="color:blue;" href="https://www.rapidfort.com/get-a-demo">www.rapidfort.com</a> to access these images</b>
+
+## 🚧 This Image is being updated 🚧 
+We are currently updating this image documentation to reflect the latest changes and features. Some sections might be incomplete or during this process
+
+Thank you for your understanding and patience!
+
+
+## What is a hardened image?
+
+A hardened container image is a functionally equivalent copy of a container image that has been optimized by removing unnecessary software components, significantly reducing its software attack surface and improving its security. Removing unnecessary software components is a critical practice to protect your infrastructure from attacks and limiting the blast radius of any attacks.
+
+RapidFort is the pioneering Software Attack Surface Management (SASM) platform in the market. Many container images can be reduced by 60-90%, have far fewer vulnerabilities, and load much faster because of their reduced size. Learn more at [RapidFort.com][rf-link].
+
+Vulnerability reports for RapidFort's hardened images are updated daily to include newly discovered vulnerabilities and fixes.
+
+<img align="center" src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/view_on_github_button.svg" alt="View on GitHub" height="50" />
+</a>
+<br>
+<br>
+
+## Need support
+
+Join our slack community for any questions.
+
+<a href="https://join.slack.com/t/rapidfortcommunity/shared_invite/zt-1g3wy28lv-DaeGexTQ5IjfpbmYW7Rm_Q">
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_banner.png" alt="RapidFort Community Slack" width="600" />
+</a>
+
+## 🌟 Support this project
+
+[![](https://user-images.githubusercontent.com/48997634/174794647-0c851917-e5c9-4fb9-bf88-b61d89dc2f4f.gif)](https://github.com/rapidfort/community-images/stargazers)
+
+### [⏫⭐️ Scroll to the star button](#start-of-content)
+
+If you find this project useful, please star this repo just like many [amazing people](https://github.com/rapidfort/community-images/stargazers) have.
+
+## Have questions?
+
+![RapidFort](https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_logo_footer.png)
+
+
+Learn more about RapidFort's pioneering Software Attack Surface Management platform at [RapidFort.com](RapidFort.com).
+
+<br>
+<br>
+
+
+[dh-rf-badge]: https://img.shields.io/badge/dockerhub-images-important.svg?logo=Docker
+
+[fossa-badge]: https://app.fossa.com/api/projects/git%2Bgithub.com%2Frapidfort%2Fcommunity-images.svg?type=shield
+[fossa-link]: https://app.fossa.com/projects/git%2Bgithub.com%2Frapidfort%2Fcommunity-images?ref=badge_shield
+
+
+[slack-badge]: https://img.shields.io/static/v1?label=Join&message=slack&logo=slack&logoColor=E01E5A&color=4A154B
+[slack-link]: https://join.slack.com/t/rapidfortcommunity/shared_invite/zt-1g3wy28lv-DaeGexTQ5IjfpbmYW7Rm_Q
+
+[rf-h-badge]: https://img.shields.io/static/v1?label=RapidFort&labelColor=333F48&message=hardened&color=50B4C4&logo=data:image/png;base64,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
+
+[rf-dh-image-link]: https://hub.docker.com/r/rapidfort/
diff --git a/community_images/shellcheck/official/assets/github_logo.png b/community_images/shellcheck/official/assets/github_logo.png
diff --git a/community_images/tika/ironbank/image.yml b/community_images/tika/ironbank/image.yml
@@ -28,7 +28,6 @@ repo_sets:
 runtimes:
   - type: docker
     script: docker_coverage.sh
-    wait_time_sec: 60
     tika-ib:
       ports: ["9998:9998"]
       volumes:

diff --git a/community_images/vale/ironbank/image.yml b/community_images/vale/ironbank/image.yml
@@ -22,7 +22,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/vale/vale:
-      input_base_tag: "v3.7."
+      input_base_tag: "v3.8."
       output_repo: vale-ib
 runtimes:
   - type: docker_compose