Skip to content

Commit

Permalink
change nonroot to limited
Browse files Browse the repository at this point in the history
  • Loading branch information
tzurielweisberg committed Sep 20, 2023
1 parent 68feb14 commit f2257cf
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 13 deletions.
16 changes: 8 additions & 8 deletions .github/workflows/pr-merged.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,21 +35,21 @@ jobs:
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64 aquasec/aqua-scanner:latest-arm64
docker push aquasec/aqua-scanner:latest-arm64
docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64-nonroot
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-nonroot aquasec/aqua-scanner:latest-amd64-nonroot
docker push aquasec/aqua-scanner:latest-amd64-nonroot
docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited aquasec/aqua-scanner:latest-amd64-limited
docker push aquasec/aqua-scanner:latest-amd64-limited
docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64-nonroot
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-nonroot aquasec/aqua-scanner:latest-arm64-nonroot
docker push aquasec/aqua-scanner:latest-arm64-nonroot
docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited aquasec/aqua-scanner:latest-arm64-limited
docker push aquasec/aqua-scanner:latest-arm64-limited
docker manifest create aquasec/aqua-scanner:latest aquasec/aqua-scanner:latest-amd64 aquasec/aqua-scanner:latest-arm64
docker manifest push aquasec/aqua-scanner:latest
docker manifest create aquasec/aqua-scanner:latest-nonroot aquasec/aqua-scanner:latest-amd64-nonroot aquasec/aqua-scanner:latest-arm64-nonroot
docker manifest push aquasec/aqua-scanner:latest-nonroot
docker manifest create aquasec/aqua-scanner:latest-limited aquasec/aqua-scanner:latest-amd64-limited aquasec/aqua-scanner:latest-arm64-limited
docker manifest push aquasec/aqua-scanner:latest-limited
- name: DockerHub description update
uses: peter-evans/dockerhub-description@v3
with:
Expand Down
10 changes: 5 additions & 5 deletions README-dockerhub.md
Original file line number Diff line number Diff line change
Expand Up @@ -145,21 +145,21 @@ podman run --rm \

When working within CI environment, it's important to include the Source Code Management (SCM) tokens for pull requests. You can find additional guidance and details on this matter within our platform for your reference about each SCM.

# aqua-scanner nonroot Tag
# aqua-scanner limited Tag

We provide a dedicated nonroot tag, for running the aqua-scanner on a nonroot user.
We provide a dedicated limited tag, for running the aqua-scanner on a limited user.

## Running nonroot tag on Azure DevOps pipeline
## Running limited tag on Azure DevOps pipeline

To use this tag effectively in Azure DevOps Pipelines, follow the steps below ([Azure documentation](This README provides guidance on how to use the Docker Hub nonroot User Tag in Azure DevOps Pipelines to run containers with reduced privileges.)).
To use this tag effectively in Azure DevOps Pipelines, follow the steps below ([Azure documentation](This README provides guidance on how to use the Docker Hub limited User Tag in Azure DevOps Pipelines to run containers with reduced privileges.)).

## Add user 0 option to the container options
```shell
trigger:
- main

container:
image: aquasec/aqua-scanner:nonroot
image: aquasec/aqua-scanner:limited
options: -u 0
env:
AQUA_KEY: $(AQUA_KEY)
Expand Down

0 comments on commit f2257cf

Please sign in to comment.