Ariadne Conill
Ariadne Conill
The topic says it all, would be nice to have test vectors that are 'officially' valid, and ones which are officially 'invalid' so we can test for conformance in the...
**What happened**: We built a test image with a locally built nginx package: `distroless.dev/nginx:latest` The locally built nginx package is matched against Alpine vulnerability data, despite not being from the...
This pull request adds a remote profiling server for people using eventlet. It is similar to the gevent one.
### Clear and concise description of the problem I want to build my software using pipelines that use nonroot images, as my builds do not require root. But Woodpecker today...
A frequent request is to support macOS for composing images. apk-tools itself has been ported to macOS as part of apk-tools v3, so it should be possible to get an...
Now that we have basic OCI image building and publishing, it's time to integrate signing.
A lock repo is a repository that contains all of the required artifacts needed to reproduce an `apko` image. The theory of operation behind this is that a user could...
apko works with any distribution which is supported by apk-tools. Add some examples for Adelie, another mature distribution which uses apk-tools.
Writing apko YAML files can be very repetitive. It would be desirable to be able to have a base configuration that can be inherited from. Something like: ```yaml from: github.com/chainguard-dev/apko/baseimages/alpine-edge.yaml@main...