From 29401e50840164c56af6106ed16d1b1243f8a1b9 Mon Sep 17 00:00:00 2001 From: Jamon Camisso Date: Fri, 6 Oct 2023 11:40:01 -0400 Subject: [PATCH] Add more vuln-comparison images (#1043) Signed-off-by: Jamon Camisso --- .github/workflows/rumble-cve-data.yaml | 2 +- .../vuln-comparison/cassandra.md | 13 +++++++++++++ .../chainguard-images/vuln-comparison/curl.md | 13 +++++++++++++ .../chainguard-images/vuln-comparison/dex.md | 13 +++++++++++++ .../vuln-comparison/dotnet-runtime.md | 13 +++++++++++++ .../vuln-comparison/dotnet-sdk.md | 13 +++++++++++++ .../chainguard-images/vuln-comparison/etcd.md | 13 +++++++++++++ .../vuln-comparison/haproxy.md | 13 +++++++++++++ .../vuln-comparison/influxdb.md | 13 +++++++++++++ .../vuln-comparison/memcached.md | 13 +++++++++++++ .../chainguard-images/vuln-comparison/nats.md | 13 +++++++++++++ .../vuln-comparison/opensearch.md | 13 +++++++++++++ .../vuln-comparison/postgres.md | 13 +++++++++++++ .../vuln-comparison/r-base.md | 13 +++++++++++++ .../vuln-comparison/redis.md | 13 +++++++++++++ .../vuln-comparison/telegraf.md | 13 +++++++++++++ .../vuln-comparison/traefik.md | 13 +++++++++++++ .../vuln-comparison/zookeeper.md | 13 +++++++++++++ data/rumble.json | 19 ++++++++++++++++++- 19 files changed, 240 insertions(+), 2 deletions(-) create mode 100644 content/chainguard/chainguard-images/vuln-comparison/cassandra.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/curl.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/dex.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/dotnet-runtime.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/dotnet-sdk.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/etcd.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/haproxy.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/influxdb.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/memcached.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/nats.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/opensearch.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/postgres.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/r-base.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/redis.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/telegraf.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/traefik.md create mode 100644 content/chainguard/chainguard-images/vuln-comparison/zookeeper.md diff --git a/.github/workflows/rumble-cve-data.yaml b/.github/workflows/rumble-cve-data.yaml index 44c4d0c0b2..5523bbb483 100644 --- a/.github/workflows/rumble-cve-data.yaml +++ b/.github/workflows/rumble-cve-data.yaml @@ -19,7 +19,7 @@ jobs: strategy: matrix: - image: ["bash", "busybox", "deno", "git", "go", "kube-state-metrics", "mariadb", "maven", "minio", "minio-client", "nginx", "node", "php", "python", "rabbitmq", "ruby", "rust", "wait-for-it", "wolfi-base"] + image: ["bash","busybox","cassandra","curl","deno","dotnet-runtime","dotnet-sdk","dex","etcd","git","go","gradle","haproxy","jenkins","kube-state-metrics","influxdb","mariadb","maven","memcached","minio","minio-client","nats","nginx","node","opensearch","php","postgres","python","rabbitmq","r-base","redis","ruby","rust","telegraf","traefik","wait-for-it","wolfi-base","zookeeper"] format: ["csv"] # supports JSON as well, but CSVs are smaller permissions: diff --git a/content/chainguard/chainguard-images/vuln-comparison/cassandra.md b/content/chainguard/chainguard-images/vuln-comparison/cassandra.md new file mode 100644 index 0000000000..8c8a53fd6c --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/cassandra.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: cassandra" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: cassandra +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/curl.md b/content/chainguard/chainguard-images/vuln-comparison/curl.md new file mode 100644 index 0000000000..1d0da5a719 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/curl.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: curl" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: curl +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/dex.md b/content/chainguard/chainguard-images/vuln-comparison/dex.md new file mode 100644 index 0000000000..d36fa42abb --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/dex.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: dex" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: dex +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/dotnet-runtime.md b/content/chainguard/chainguard-images/vuln-comparison/dotnet-runtime.md new file mode 100644 index 0000000000..e35d440789 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/dotnet-runtime.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: dotnet-runtime" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: dotnet-runtime +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/dotnet-sdk.md b/content/chainguard/chainguard-images/vuln-comparison/dotnet-sdk.md new file mode 100644 index 0000000000..2a7e10c4b2 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/dotnet-sdk.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: dotnet-sdk" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: dotnet-sdk +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/etcd.md b/content/chainguard/chainguard-images/vuln-comparison/etcd.md new file mode 100644 index 0000000000..a7c4da9d64 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/etcd.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: etcd" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: etcd +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/haproxy.md b/content/chainguard/chainguard-images/vuln-comparison/haproxy.md new file mode 100644 index 0000000000..2241952beb --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/haproxy.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: haproxy" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: haproxy +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/influxdb.md b/content/chainguard/chainguard-images/vuln-comparison/influxdb.md new file mode 100644 index 0000000000..987d06f20e --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/influxdb.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: influxdb" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: influxdb +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/memcached.md b/content/chainguard/chainguard-images/vuln-comparison/memcached.md new file mode 100644 index 0000000000..c9314b1d62 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/memcached.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: memcached" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: memcached +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/nats.md b/content/chainguard/chainguard-images/vuln-comparison/nats.md new file mode 100644 index 0000000000..7026d64f7a --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/nats.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: nats" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: nats +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/opensearch.md b/content/chainguard/chainguard-images/vuln-comparison/opensearch.md new file mode 100644 index 0000000000..f7b5e102e6 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/opensearch.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: opensearch" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: opensearch +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/postgres.md b/content/chainguard/chainguard-images/vuln-comparison/postgres.md new file mode 100644 index 0000000000..15f67eba78 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/postgres.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: postgres" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: postgres +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/r-base.md b/content/chainguard/chainguard-images/vuln-comparison/r-base.md new file mode 100644 index 0000000000..2ceca92bdb --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/r-base.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: r-base" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: r-base +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/redis.md b/content/chainguard/chainguard-images/vuln-comparison/redis.md new file mode 100644 index 0000000000..c59a97c76c --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/redis.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: redis" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: redis +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/telegraf.md b/content/chainguard/chainguard-images/vuln-comparison/telegraf.md new file mode 100644 index 0000000000..90dd1df005 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/telegraf.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: telegraf" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: telegraf +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/traefik.md b/content/chainguard/chainguard-images/vuln-comparison/traefik.md new file mode 100644 index 0000000000..99f97c17fa --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/traefik.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: traefik" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: traefik +--- + diff --git a/content/chainguard/chainguard-images/vuln-comparison/zookeeper.md b/content/chainguard/chainguard-images/vuln-comparison/zookeeper.md new file mode 100644 index 0000000000..d9c357efb6 --- /dev/null +++ b/content/chainguard/chainguard-images/vuln-comparison/zookeeper.md @@ -0,0 +1,13 @@ +--- +title: "Vulnerability Comparison: zookeeper" +type: "article" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: false +linktitle: zookeeper +--- + diff --git a/data/rumble.json b/data/rumble.json index fb1e2f4c4f..d18f345971 100644 --- a/data/rumble.json +++ b/data/rumble.json @@ -1,23 +1,40 @@ [ {"image":"bash","left":"bash:latest","right":"cgr.dev/chainguard/bash:latest"}, {"image":"busybox","left":"busybox:latest","right":"cgr.dev/chainguard/busybox:latest"}, + {"image":"cassandra","left":"cassandra:latest","right":"cgr.dev/chainguard/cassandra:latest"}, + {"image":"curl","left":"curlimages/curl:latest","right":"cgr.dev/chainguard/curl:latest"}, {"image":"deno","left":"deno:latest","right":"cgr.dev/chainguard/deno:latest"}, + {"image":"dotnet-runtime","left":"mcr.microsoft.com/dotnet/runtime:latest","right":"cgr.dev/chainguard/dotnet-runtime:latest"}, + {"image":"dotnet-sdk","left":"mcr.microsoft.com/dotnet/sdk:latest","right":"cgr.dev/chainguard/dotnet-sdk:latest"}, + {"image":"dex","left":"dexidp/dex:latest","right":"cgr.dev/chainguard/dex:latest"}, + {"image":"etcd","left":"bitnami/etcd:latest","right":"cgr.dev/chainguard/etcd:latest"}, {"image":"git","left":"bitnami/git:latest","right":"cgr.dev/chainguard/git:latest"}, {"image":"go","left":"golang:latest","right":"cgr.dev/chainguard/go:latest"}, {"image":"gradle","left":"gradle:latest","right":"cgr.dev/chainguard/gradle:latest"}, + {"image":"haproxy","left":"haproxy:latest","right":"cgr.dev/chainguard/haproxy:latest"}, {"image":"jenkins","left":"jenkins/jenkins:lts","right":"cgr.dev/chainguard/jenkins:latest"}, {"image":"kube-state-metrics","left":"bitnami/kube-state-metrics:latest","right":"cgr.dev/chainguard/kube-state-metrics:latest"}, + {"image":"influxdb","left":"influxdb:latest","right":"cgr.dev/chainguard/influxdb:latest"}, {"image":"mariadb","left":"mariadb:latest","right":"cgr.dev/chainguard/mariadb:latest"}, {"image":"maven","left":"maven:latest","right":"cgr.dev/chainguard/maven:latest"}, + {"image":"memcached","left":"memcached:latest","right":"cgr.dev/chainguard/memcached:latest"}, {"image":"minio","left":"minio/minio:latest","right":"cgr.dev/chainguard/minio:latest"}, {"image":"minio-client","left":"bitnami/minio-client:latest","right":"cgr.dev/chainguard/minio-client:latest"}, + {"image":"nats","left":"nats:latest","right":"cgr.dev/chainguard/nats:latest"}, {"image":"nginx","left":"nginx:latest","right":"cgr.dev/chainguard/nginx:latest"}, {"image":"node","left":"node:latest","right":"cgr.dev/chainguard/node:latest"}, + {"image":"opensearch","left":"opensearchproject/opensearch:latest","right":"cgr.dev/chainguard/opensearch:latest"}, {"image":"php","left":"php:latest","right":"cgr.dev/chainguard/php:latest"}, + {"image":"postgres","left":"postgres:latest","right":"cgr.dev/chainguard/postgres:latest"}, {"image":"python","left":"python:latest","right":"cgr.dev/chainguard/python:latest"}, {"image":"rabbitmq","left":"rabbitmq:latest","right":"cgr.dev/chainguard/rabbitmq:latest"}, + {"image":"r-base","left":"r-base:latest","right":"cgr.dev/chainguard/r-base:latest"}, + {"image":"redis","left":"redis:latest","right":"cgr.dev/chainguard/redis:latest"}, {"image":"ruby","left":"ruby:latest","right":"cgr.dev/chainguard/ruby:latest"}, {"image":"rust","left":"rust:latest","right":"cgr.dev/chainguard/rust:latest"}, + {"image":"telegraf","left":"telegraf:latest","right":"cgr.dev/chainguard/telegraf:latest"}, + {"image":"traefik","left":"traefik:latest","right":"cgr.dev/chainguard/traefik:latest"}, {"image":"wait-for-it","left":"willwill/wait-for-it:latest","right":"cgr.dev/chainguard/wait-for-it:latest"}, - {"image":"wolfi-base","left":"alpine:latest","right":"cgr.dev/chainguard/wolfi-base:latest"} + {"image":"wolfi-base","left":"alpine:latest","right":"cgr.dev/chainguard/wolfi-base:latest"}, + {"image":"zookeeper","left":"zookeeper:latest","right":"cgr.dev/chainguard/zookeeper:latest"} ]