Comments (7)
Hmm.. according to DSOS requirements, the image we keep on Dockerhub must:
Be in active development (this means image updates are pushed regularly within the past 6
months or dependencies are updated regularly, even if the project source code is stable)
We have not updated the test image in 3 years (lol). Looks like we should look at GHCR.
from tern.
I will leave a comment about our usage of Dockerhub. We may be able to get some suggestions as to how to test without dockerhub.
from tern.
Looks like Docker decided to roll back the sunset of free teams accounts. We should still probably start to think about our plan when they inevitably implement this, though.
from tern.
Thanks for raising this @nishakm! According to docker/hub-feedback#2314 (comment) "Docker has a specific DSOS program for open-source projects, and it is not affected by the sunsetting of Free Team plans."
So it seems like Tern needs to apply for this and move the image there. If we dont get accepted, then we will need to move the image somewhere else.... GHCR seems like the next best option?
from tern.
If, for some reason, the Docker-Sponsored Open-Source Program isn't working out, we are happy to help you out. We operate a Harbor-based container registry as a service that has many benefits over most of the other registries out there.
There are also features regarding containerized image distribution, that might be valuable too as well.
Don't underestimate the value of owning and controlling your data, it is easier to migrate if the domain is under your control.
from tern.
btw. also happy to helm you display tern date in Harbor
from tern.
If, for some reason, the Docker-Sponsored Open-Source Program isn't working out, we are happy to help you out. We operate a Harbor-based container registry as a service that has many benefits over most of the other registries out there.
Thanks! We only have one image we use for testing the client side APIs. I suppose we could run a Harbor container on the CI runner and keep the image as a tarball as part of the test data, but that would be too much trouble. We don't distribute any containers (we may do it in the future).
from tern.
Related Issues (20)
- Container package name incorrect when analyzing local image
- Missing container package version when no tag provided for container image HOT 1
- Modify apk workaround commit now that purl spec has been updated HOT 1
- golang package names create invalid SPDXRefs
- Commas included in SPDX license expressions instead of 'AND'
- [SPDX][JSON] SBOM value format is incorrect for licenseDeclared HOT 1
- Error on image load if prefixed with a variable HOT 1
- Parsing error: JAVA_OPTS:: bad variable name HOT 1
- Potential issue with `LicenseInfoFromFiles` HOT 3
- Problem with broken symlinks while scaning some containers HOT 2
- Can't build images with Dockerfile samples HOT 4
- What is the best test image for integration testing? HOT 4
- Invalid file information in SPDX documents HOT 9
- Project still alive? HOT 3
- Docker image building seems to run indefinitely on extern dockerfiles
- Support for SPDX 2.3? HOT 1
- Support all skopeo image prefixes for `tern report -i`
- Support `docker build` arguments for `tern sbom -f Dockerfile` and `tern lock`
- Output generated from Tern has 0 bytes
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tern.