peco8 / minimum-rack-cnb

Minimum Rack based Cloud Native Build Pack sample

minimum-rack-cnb

This repository contains instruction how to build image without Dockerfile (a bare minimum Rack app) using Cloud Native Buildpack.

Getting started

Usage

This buildpack is currently intended to be used with the heroku builder heroku/pack:18 via pack.

Locally

Build your app

git clone [email protected]:peco8/minimum-rack-cnb.git
cd minimum-rack-cnb
pack build sample \
     --builder heroku/buildpacks:18
     --path .

Quick test

docker run --rm -e PORT=8080 -p 8080:8080 sample
curl -s http://0.0.0.0:8080

GithubActions (CI)

Container images should be built in CI environment, not local. In this repo, we already have CI environment using GithubActions.

Push and Build

Fork and clone this repo locally
cd minimum-rack-cnb
git commit --allow-empty
git push origin master

Pull

docker pull docker.pkg.github.com/<USERNAME>/minimum-rack-cnb/sample:latest

Quick test

docker run --rm -e PORT=8080 -p 8080:8080 docker.pkg.github.com/<USERNAME>/minimum-rack-cnb/sample

minimum-rack-cnb's Issues

[Security] Workflow build.yml is using vulnerable action actions/checkout

The workflow build.yml is referencing action actions/checkout using references v1. However this reference is missing the commit a6747255bd19d7a757dbdda8c654a9f84db19839 which may contain fix to the some vulnerability.
The vulnerability fix that is missing by actions version could be related to:
(1) CVE fix
(2) upgrade of vulnerable dependency
(3) fix to secret leak and others.
Please consider to update the reference to the action.

[Security] Workflow build.yml is using vulnerable action actions/checkout

The workflow build.yml is referencing action actions/checkout using references v1. However this reference is missing the commit a6747255bd19d7a757dbdda8c654a9f84db19839 which may contain fix to the some vulnerability.
The vulnerability fix that is missing by actions version could be related to:
(1) CVE fix
(2) upgrade of vulnerable dependency
(3) fix to secret leak and others.
Please consider to update the reference to the action.