Record · corpus.blog/posts/01a0875c-36f2-7316-b58d-7e43d6506d86

Always Use Docker Image Digests

candrews.integralblue.com · published 21 September 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at candrews.integralblue.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 2,334

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://en.wikipedia.org/wiki/Information_security

en.wikipedia.org

https://github.com/docker-library/python/commit/090760cb09d6061d973a68d7fa148cbbde100cb9

github.com

https://reproducible-builds.org/

reproducible-builds.org

https://candrews.integralblue.com/2020/06/reproducible-builds-in-java/

candrews.integralblue.com

https://www.mend.io/free-developer-tools/blog/overcoming-dockers-mutable-image-tags/

mend.io

https://engineering.remind.com/docker-image-digests/

engineering.remind.com

https://github.blog/2023-07-11-demonstrating-end-to-end-traceability-with-pull-requests/

github.blog

https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf

docs-prv.pcisecuritystandards.org

https://www.iso.org/standard/27001

iso.org

https://www.isaca.org/resources/cobit

isaca.org

https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions

docs.github.com

https://blog.danlew.net/2015/09/09/dont-use-dynamic-versions-for-your-dependencies/

blog.danlew.net

https://www.ibm.com/docs/en/filenet-p8-platform/5.5.x?topic=deployment-choosing-image-tags-digests

ibm.com

https://docs.bridgecrew.io/docs/bc_k8s_39

docs.bridgecrew.io

https://kubernetes.io/docs/concepts/containers/images/

kubernetes.io

https://github.com/kubernetes/website/pull/40375

github.com

https://rules.sonarsource.com/docker/RSPEC-6497

rules.sonarsource.com

https://community.sonarsource.com/t/s6497-pulling-an-image-based-on-its-digest-is-security-sensitive-is-harmful-to-security/95415

community.sonarsource.com

https://community.sonarsource.com/t/s6497-pulling-an-image-based-on-its-digest-is-security-sensitive-is-harmful-to-security/95415/22

community.sonarsource.com

https://renovatebot.com

renovatebot.com

https://candrews.integralblue.com/2021/03/automating-dependency-updates/

candrews.integralblue.com

https://docs.github.com/en/code-security/dependabot

docs.github.com

https://repo1.dso.mil/dsop/dccscr/-/issues/1623

repo1.dso.mil