OCI image builder (buildah+forgejo) made to be usable in a locked-down OCI container container.
This config makes it so that the registry password isn't passed as a command line argument to an external command (buildah login), but only to an internal command (echo). Thus the password can't be visible in process tree. (e.g. by using ps). |
||
|---|---|---|
| .forgejo/workflows | ||
| oci-builder | ||
| LICENSE | ||
| README.md | ||
The images live at registry.uncontrol.me/ver4a/oci-builder
Two tags are currently used:
:stablelatest image to have successfully passed CI tests:ci-devan image produced by CI, if it passes tests, it's promoted to:stable