Sync Latest Updates from Team RapidFort

Signed-off-by: RapidFort Sync Bot <[email protected]>
rapidfort · Nov 5, 2024 · 7b7bfea · 7b7bfea
1 parent 9a40f6f
commit 7b7bfea
Show file tree

Hide file tree

Showing 21 changed files with 96 additions and 31 deletions.
diff --git a/community_images/consul/bitnami/image.yml b/community_images/consul/bitnami/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - consul:
-      input_base_tag: "1.20.0-debian-12-r"
+      input_base_tag: "1.20.1-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/docker/official/README.md b/community_images/docker/official/README.md
@@ -0,0 +1,71 @@
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_logo.png" alt="RapidFort" width="200" />
+</a>
+
+<br>
+
+[![DH Image][dh-rf-badge]][rf-dh-image-link]
+[![Slack][slack-badge]][slack-link]
+
+<b>Near Zero CVE images available at <a style="color:blue;" href="https://hub.rapidfort.com/repositories">hub.rapidfort.com/repositories</a>.</b>
+
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/critical_button.png" alt="⚠️ CRITICAL NOTICE" width="150" /> <br>
+<b>As of 7/2024 community-images will be gated. Please register for free at <a style="color:blue;" href="https://www.rapidfort.com/get-a-demo">www.rapidfort.com</a> to access these images</b>
+
+## 🚧 This Image is being updated 🚧 
+We are currently updating this image documentation to reflect the latest changes and features. Some sections might be incomplete or during this process
+
+Thank you for your understanding and patience!
+
+
+## What is a hardened image?
+
+A hardened container image is a functionally equivalent copy of a container image that has been optimized by removing unnecessary software components, significantly reducing its software attack surface and improving its security. Removing unnecessary software components is a critical practice to protect your infrastructure from attacks and limiting the blast radius of any attacks.
+
+RapidFort is the pioneering Software Attack Surface Management (SASM) platform in the market. Many container images can be reduced by 60-90%, have far fewer vulnerabilities, and load much faster because of their reduced size. Learn more at [RapidFort.com][rf-link].
+
+Vulnerability reports for RapidFort's hardened images are updated daily to include newly discovered vulnerabilities and fixes.
+
+<img align="center" src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/view_on_github_button.svg" alt="View on GitHub" height="50" />
+</a>
+<br>
+<br>
+
+## Need support
+
+Join our slack community for any questions.
+
+<a href="https://join.slack.com/t/rapidfortcommunity/shared_invite/zt-1g3wy28lv-DaeGexTQ5IjfpbmYW7Rm_Q">
+<img src="https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_banner.png" alt="RapidFort Community Slack" width="600" />
+</a>
+
+## 🌟 Support this project
+
+[![](https://user-images.githubusercontent.com/48997634/174794647-0c851917-e5c9-4fb9-bf88-b61d89dc2f4f.gif)](https://github.com/rapidfort/community-images/stargazers)
+
+### [⏫⭐️ Scroll to the star button](#start-of-content)
+
+If you find this project useful, please star this repo just like many [amazing people](https://github.com/rapidfort/community-images/stargazers) have.
+
+## Have questions?
+
+![RapidFort](https://raw.githubusercontent.com/rapidfort/community-images/main/contrib/github_logo_footer.png)
+
+
+Learn more about RapidFort's pioneering Software Attack Surface Management platform at [RapidFort.com](RapidFort.com).
+
+<br>
+<br>
+
+
+[dh-rf-badge]: https://img.shields.io/badge/dockerhub-images-important.svg?logo=Docker
+
+[fossa-badge]: https://app.fossa.com/api/projects/git%2Bgithub.com%2Frapidfort%2Fcommunity-images.svg?type=shield
+[fossa-link]: https://app.fossa.com/projects/git%2Bgithub.com%2Frapidfort%2Fcommunity-images?ref=badge_shield
+
+
+[slack-badge]: https://img.shields.io/static/v1?label=Join&message=slack&logo=slack&logoColor=E01E5A&color=4A154B
+[slack-link]: https://join.slack.com/t/rapidfortcommunity/shared_invite/zt-1g3wy28lv-DaeGexTQ5IjfpbmYW7Rm_Q
+
+[rf-h-badge]: https://img.shields.io/static/v1?label=RapidFort&labelColor=333F48&message=hardened&color=50B4C4&logo=data:image/png;base64,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
+
+[rf-dh-image-link]: https://hub.docker.com/r/rapidfort/
diff --git a/community_images/docker/official/assets/github_logo.png b/community_images/docker/official/assets/github_logo.png
diff --git a/community_images/envoy/bitnami/image.yml b/community_images/envoy/bitnami/image.yml
@@ -24,15 +24,13 @@ input_registry:
   account: bitnami
 repo_sets:
   - envoy:
-      input_base_tag: "1.28.7-debian-12-r"
+      input_base_tag: "1.29.10-debian-12-r"
   - envoy:
-      input_base_tag: "1.29.9-debian-12-r"
+      input_base_tag: "1.30.7-debian-12-r"
   - envoy:
-      input_base_tag: "1.30.6-debian-12-r"
+      input_base_tag: "1.31.3-debian-12-r"
   - envoy:
-      input_base_tag: "1.31.2-debian-12-r"
-  - envoy:
-      input_base_tag: "1.32.0-debian-12-r"
+      input_base_tag: "1.32.1-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/fluent-bit/bitnami/image.yml b/community_images/fluent-bit/bitnami/image.yml
@@ -26,7 +26,7 @@ repo_sets:
   - fluent-bit:
       input_base_tag: "2.2.3-debian-12-r"
   - fluent-bit:
-      input_base_tag: "3.1.9-debian-12-r"
+      input_base_tag: "3.1.10-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/ghost/bitnami/image.yml b/community_images/ghost/bitnami/image.yml
@@ -25,7 +25,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - ghost:
-      input_base_tag: "5.98.0-debian-12-r"
+      input_base_tag: "5.99.0-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/kyverno-background-controller/ironbank/image.yml b/community_images/kyverno-background-controller/ironbank/image.yml
@@ -23,7 +23,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/kyverno/kyverno/background-controller:
-      input_base_tag: "v1.12."
+      input_base_tag: "v1.13."
       output_repo: kyverno-background-controller-ib
 runtimes:
   - type: k8s

diff --git a/community_images/kyverno-cleanup-controller/ironbank/image.yml b/community_images/kyverno-cleanup-controller/ironbank/image.yml
@@ -23,7 +23,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/kyverno/kyverno/cleanup-controller:
-      input_base_tag: "v1.12."
+      input_base_tag: "v1.13."
       output_repo: kyverno-cleanup-controller-ib
 runtimes:
   - type: k8s

diff --git a/community_images/kyverno-reports-controller/ironbank/image.yml b/community_images/kyverno-reports-controller/ironbank/image.yml
@@ -23,7 +23,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/kyverno/kyverno/reports-controller:
-      input_base_tag: "v1.12."
+      input_base_tag: "v1.13."
       output_repo: kyverno-reports-controller-ib
 runtimes:
   - type: k8s

diff --git a/community_images/mariadb/bitnami/image.yml b/community_images/mariadb/bitnami/image.yml
@@ -25,15 +25,15 @@ input_registry:
   account: bitnami
 repo_sets:
   - mariadb:
-      input_base_tag: "10.5.26-debian-12-r"
+      input_base_tag: "10.5.27-debian-12-r"
   - mariadb:
-      input_base_tag: "10.6.19-debian-12-r"
+      input_base_tag: "10.6.20-debian-12-r"
   - mariadb:
-      input_base_tag: "10.11.9-debian-12-r"
+      input_base_tag: "10.11.10-debian-12-r"
   - mariadb:
-      input_base_tag: "11.2.5-debian-12-r"
+      input_base_tag: "11.2.6-debian-12-r"
   - mariadb:
-      input_base_tag: "11.4.3-debian-12-r"
+      input_base_tag: "11.4.4-debian-12-r"
   - mariadb:
       input_base_tag: "11.5.2-debian-12-r"
 runtimes:

diff --git a/community_images/mongodb/bitnami/image.yml b/community_images/mongodb/bitnami/image.yml
@@ -47,8 +47,3 @@ runtimes:
       mongodb:
         repository: "MONGODB_IMAGE_REPOSITORY"
         tag: "MONGODB_IMAGE_TAG"
-  - type: docker
-    script: docker_coverage.sh
-    mongodb:
-      environment:
-        MONGODB_ROOT_PASSWORD: password123
diff --git a/community_images/mongodb/official/image.yml b/community_images/mongodb/official/image.yml
@@ -49,6 +49,7 @@ runtimes:
       mongodb-official:
         repository: "MONGODB_IMAGE_REPOSITORY"
         tag: "MONGODB_IMAGE_TAG"
+    wait_time_sec: 10
   - type: docker
     script: docker_coverage.sh
     mongodb:

diff --git a/community_images/nifi-registry/ironbank/image.yml b/community_images/nifi-registry/ironbank/image.yml
@@ -22,7 +22,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/apache/nifi-registry:
-      input_base_tag: "1.27."
+      input_base_tag: "1.28."
       output_repo: nifi-registry-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/nifi/ironbank/image.yml b/community_images/nifi/ironbank/image.yml
@@ -23,7 +23,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/apache/nifi:
-      input_base_tag: "1.27."
+      input_base_tag: "1.28."
       output_repo: nifi-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/opa/ironbank/image.yml b/community_images/opa/ironbank/image.yml
@@ -26,7 +26,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/openpolicyagent/opa:
-      input_base_tag: "0.69."
+      input_base_tag: "0.70."
       output_repo: opa-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/prometheus-config-reloader/ironbank/image.yml b/community_images/prometheus-config-reloader/ironbank/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/prometheus-operator/prometheus-config-reloader:
-      input_base_tag: "v0.77."
+      input_base_tag: "v0.78."
       output_repo: prometheus-config-reloader-ib
 runtimes:
   - type: k8s

diff --git a/community_images/prometheus-operator/ironbank/image.yml b/community_images/prometheus-operator/ironbank/image.yml
@@ -22,7 +22,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/prometheus-operator/prometheus-operator:
-      input_base_tag: "v0.77."
+      input_base_tag: "v0.78."
       output_repo: prometheus-operator-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/rabbitmq/bitnami/image.yml b/community_images/rabbitmq/bitnami/image.yml
@@ -25,7 +25,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - rabbitmq:
-      input_base_tag: "4.0.2-debian-12-r"
+      input_base_tag: "4.0.3-debian-12-r"
 runtimes:
   - type: k8s
     script: k8s_coverage.sh

diff --git a/community_images/redis-exporter/ironbank/image.yml b/community_images/redis-exporter/ironbank/image.yml
@@ -21,7 +21,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - bitnami/analytics/redis-exporter:
-      input_base_tag: "v1.65."
+      input_base_tag: "v1.66."
       output_repo: redis-exporter-ib
 runtimes:
   - type: docker_compose

diff --git a/community_images/telegraf/bitnami/image.yml b/community_images/telegraf/bitnami/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: bitnami
 repo_sets:
   - telegraf:
-      input_base_tag: "1.32.1-debian-12-r"
+      input_base_tag: "1.32.2-debian-12-r"
 runtimes:
   - type: docker_compose
     script: dc_coverage.sh

diff --git a/community_images/traefik/ironbank/image.yml b/community_images/traefik/ironbank/image.yml
@@ -24,7 +24,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/traefik/traefik:
-      input_base_tag: "v3.1."
+      input_base_tag: "v3.2."
       output_repo: traefik-ib
 runtimes:
   - type: docker_compose