Raiffeisen-DGTL/The-Way-of-CICD-Open-Source-Edition

Broken link in the main README

kutovoys opened this issue · 4 comments

kutovoys commented

Hello.
The main README mentions the binary-scan step with a link that leads to 404
There is no mention of the binary-scan folder in the repository itself either.
This step is very interesting to me. Maybe you accidentally forgot to upload it?

P.S.: Thanks for your presentation at the DevOops conf. Very interesting speech. It inspired me to change current approaches to building pipelines in our company.

d-nemi commented

Hi, @kutovoys!
Thanks for mentioning and sorry for the delay.

We used to scan artifacts with j-frog X-ray.
It's a paid proprietary software, and we don't have the license anymore, so we decommissioned 'binary-scan' module.
Thanks for pointing to the broken link, we'll fix it.

We have plans to replace x-ray with trivy, which is an opensource project.
Hopefully, we'll do it this year, but unfortunately we can't guarantee.

Thanks for your feedback and for your interest in this project!

  • ❤️1
kutovoys commented

@d-nemi Thank you for answer.
For binary scan i can suggest:

Both products have Trivy inside

evgeniy-kharchenko commented

We're going to create an update for project.
Stay tuned, a lot of interesting in a further release!

  • ❤️1