{"id":16264980,"url":"https://github.com/ironpeakservices/iron-alpine","last_synced_at":"2025-04-05T01:08:35.717Z","repository":{"id":36414320,"uuid":"166044822","full_name":"ironpeakservices/iron-alpine","owner":"ironpeakservices","description":"Hardened alpine linux baseimage for Docker.","archived":false,"fork":false,"pushed_at":"2025-03-20T04:48:33.000Z","size":213,"stargazers_count":140,"open_issues_count":9,"forks_count":14,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-04-05T01:08:23.377Z","etag":null,"topics":["alpine","docker"],"latest_commit_sha":null,"homepage":"https://github.com/ironPeakServices/iron-alpine","language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ironpeakservices.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-01-16T13:28:12.000Z","updated_at":"2025-03-28T06:58:25.000Z","dependencies_parsed_at":"2024-09-09T10:01:14.125Z","dependency_job_id":"d252ac15-bae8-4a5b-b09f-e67aeea8ea1d","html_url":"https://github.com/ironpeakservices/iron-alpine","commit_stats":{"total_commits":153,"total_committers":8,"mean_commits":19.125,"dds":0.6274509803921569,"last_synced_commit":"1bbbd85e53755ee75d6ede82d1680c65faeff226"},"previous_names":[],"tags_count":34,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ironpeakservices%2Firon-alpine","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ironpeakservices%2Firon-alpine/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ironpeakservices%2Firon-alpine/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ironpeakservices%2Firon-alpine/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ironpeakservices","download_url":"https://codeload.github.com/ironpeakservices/iron-alpine/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247271532,"owners_count":20911587,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["alpine","docker"],"created_at":"2024-10-10T17:05:03.000Z","updated_at":"2025-04-05T01:08:35.683Z","avatar_url":"https://github.com/ironpeakservices.png","language":"Dockerfile","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ironpeakservices/iron-alpine\nHardened alpine linux baseimage for Docker.\n\nNote: If you use Golang, build statically and use [iron-scratch](https://github.com/ironpeakservices/iron-scratch).\nIf you are using Java/Python/NodeJS/dotnet, use a [distroless image](https://github.com/GoogleContainerTools/distroless) instead.\n\n```\n# you can pull a global version (3), a series version (3.13) or a specific version (3.13.2)\ndocker pull ghcr.io/ironpeakservices/iron-alpine/iron-alpine:3\ndocker pull ghcr.io/ironpeakservices/iron-alpine/iron-alpine:3.13\ndocker pull ghcr.io/ironpeakservices/iron-alpine/iron-alpine:3.13.2\n```\n\n## How is this different?\n- ca-certificates included\n- /app for everything app-related; /app/conf, /app/tmp, /app/data\n- no interactive shells for users\n- removed unneccessary accounts, only 'app' and 'root' users\n- removed crontabs\n- removed dangerous commands and utilities\n- strictened permissions on system files and directories\n- removed temporary shadow/passwd/group\n- removed suid/guid files\n- removed init scripts\n- removed kernel tunables\n- removed /root/\n- removed fstab\n- post-install.sh:\n\t- removes apk manager after installation\n\t- sets permissions on /app after installation\n\n## Example\n`docker pull ghcr.io/ironpeakservices/iron-alpine:1.0.0`\n\nSee [the nginx example](example/).\n\n## Update policy\nUpdates to the official alpine docker image are automatically created as a pull request and trigger linting \u0026 a docker build. When those checks complete without errors, a merge into master will trigger a deploy with the same version to packages.\n\n## Additional\nIf you want, you can also enable vulnerability scanning during your build (for free).\nTake a look at https://github.com/aquasecurity/microscanner\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fironpeakservices%2Firon-alpine","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fironpeakservices%2Firon-alpine","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fironpeakservices%2Firon-alpine/lists"}