You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A shortcut to packaging your Python code with requirement dependencies into a Distroless image.
5
7
@@ -28,6 +30,14 @@ These images use a **hybrid multi-stage build**:
28
30
29
31
This approach gives you the reliability of official Python builds while maintaining full control over the base system and dependencies.
30
32
33
+
### Security
34
+
35
+
This project includes automated security measures:
36
+
- 🔒 **Nightly Vulnerability Scanning**: All images scanned with [Trivy](https://github.com/aquasecurity/trivy) for CRITICAL and HIGH severity vulnerabilities
37
+
- 🔄 **Automated Dependency Updates**: [Dependabot](https://github.com/dependabot) monitors base images and GitHub Actions for security updates
38
+
- 📊 **Transparent Results**: Scan results available in the [Security tab](https://github.com/jski/python-container-builder/security/code-scanning)
39
+
- 🏗️ **Official Base Images**: Built from official Python and Debian Docker images, ensuring timely security patches
40
+
31
41
## Goals
32
42
This project seeks to:
33
43
- Simplify the build/packaging process for simple Python projects.
0 commit comments