This library allows you to harden a Docker Image to meet GSA security policy.
Parameters reference:
- @param
artifactoryURLThe URL of your Docker Image artifactory service provider URL, example https://example.com/artifactory/1 - @param
artifactoryRegistryThe registry name, in most of case it is your repository name, example 'gp-ociso-image' - @param
artifactoryRegistryCredIDThe Jenkins credential ID for artifactory authentication, example 'fcs_ise_artifactory' - @param
pushImageNameThe image name we will Push to our repository - @param
pushImageTagThe image tag we will apply to the image we Push to our repository - @param
twistlockURLThe GSA twistedlockURL, example: https://twistlock.dummy.example.gsa.gov:12345/ - @param
twistlockCredIDThe Jenkins credential ID for twistlock API call - @param
anchoreURLThe GSA anchoreURL, example: http://111.111.111.111:12345/ - @param
anchoreCredIDThe Jenkins credential ID for anchore API call
Source Code: hardenDockerImage.groovy
This library allows you to harden a AWS AMI for EKS. Basically it should be only a packer build that execute ansible on remote localhost. Detailed logics are defined in ./packer/run-packer-build.sh in external Git Repository alone with your ansible and packer code.
Source Code: hardenAWSAmiForEKS.groovy