BundesMessenger Container Image Factory 1.23.0
BundesMessenger Buildsystem for container images
Open source badge
Awarded when the project uses an approved open source license.
- 🥇 Gold
- Licensed under an approved open source license
Maintained badge
Awarded when the project meets maintenance health criteria.
- 🥇 Gold
- Multiple active maintainers
- 🥈 Silver
- At least one release in the last 6 months
- 🥉 Bronze
- 5+ commits in 6 months, issues responded to within 7 days
Reused badge
Awarded when the project is packaged and adopted by others.
- 🥇 Gold
- Actively used by 10+ organizations
- 🥈 Silver
- Actively used by at least one organization
- 🥉 Bronze
- Published packages and passing CI in the last 6 months
Security badge
Awarded when the project follows security best practices.
- 🥇 Gold
- No known vulnerabilities at release, critical CVEs fixed within a day
- 🥈 Silver
- 75%+ merge requests reviewed, 80%+ tags signed
- 🥉 Bronze
- Protected branches, security policy, fast issue response
Supply chain badge
Awarded when the supply chain is transparent following SLSA standards.
- 🥇 Gold
- Full build and source provenance traceability
- 🥈 Silver
- VEX attestations for vulnerability assessment
- 🥉 Bronze
- Changelog, contribution guidelines, SBOM attestations
Features
- licence-compliant, through integration of an SBOM and provision of the sources of the system packages and application modules
- The build process takes place in a rootless container (Principle of Least Privilege)
- Immutable tags for unique versioning (tag always points to the same container image)
- The images enable repeatable deployments through the provision of the Immutable tags (increasing security)
- Rolling Tags for security updates
- Images are prepared for rootless use (e.g. with nginx using of ports > 1024)
- Reproducible builds for verifiability of the base layers against the official snapshots from debian
- Hardening by removing package managers and unnecessary tools
Description
The Container Image Factory is a buildsystem for container images. The images can be be used f.e. in docker, podman or kubernetes. It includes a toolchain to build basic Docker images and push them to a registry. All container images for the BundesMessenger Container Deployment are created from scratch by the container factory und are continually updated. The container images are created to be licence-compliant, secure and updatable.