Name		Name	Last commit message	Last commit date
Latest commit History 5,012 Commits
.allstar		.allstar
.github		.github
age		age
ali		ali
amass		amass
ansible		ansible
aznamingtool		aznamingtool
bl3auto		bl3auto
black		black
catprinter		catprinter
cf-warp		cf-warp
cloudflared		cloudflared
coredns		coredns
ddosify		ddosify
dhcp-helper		dhcp-helper
dive		dive
dkimpy		dkimpy
dnscontrol		dnscontrol
dnscrypt-proxy		dnscrypt-proxy
dnsx		dnsx
docker-autocompose		docker-autocompose
docker-bench-security		docker-bench-security
driftctl		driftctl
dry		dry
dsq		dsq
excalidraw		excalidraw
fq		fq
gobgp		gobgp
gocannon		gocannon
goplay2		goplay2
goreplay		goreplay
gotip		gotip
gron		gron
hakrawler		hakrawler
headscale		headscale
httpie-go		httpie-go
httprobe		httprobe
httpx		httpx
imapsync		imapsync
lego		lego
log4j-scan		log4j-scan
logmepwn		logmepwn
lpar2rrd		lpar2rrd
miller		miller
nebula		nebula
netmaker		netmaker
nginx-distroless		nginx-distroless
nginx-quic		nginx-quic
nginx		nginx
ntfy		ntfy
octosql		octosql
onetun		onetun
pia-wg		pia-wg
prettier		prettier
pwru		pwru
rclone		rclone
rdap		rdap
rustybgp		rustybgp
sandbox		sandbox
scripts		scripts
sftpd		sftpd
spicedb		spicedb
ssh-audit		ssh-audit
sslyze		sslyze
stor2rrd		stor2rrd
subfinder		subfinder
tailscale		tailscale
templates		templates
terraform		terraform
testssl.sh		testssl.sh
textql		textql
tftpd		tftpd
toxiproxy		toxiproxy
trufflehog		trufflehog
unbound		unbound
vegeta		vegeta
visidata		visidata
watchtower		watchtower
whois		whois
wuzz		wuzz
yggdrasil-go		yggdrasil-go
youtube-dl		youtube-dl
yt-dlp		yt-dlp
zola		zola
.codespellignore		.codespellignore
.dockerignore		.dockerignore
.gitignore		.gitignore
BUILD_STATUS.md		BUILD_STATUS.md
LICENSE		LICENSE
README.md		README.md
SECURITY.md		SECURITY.md

Repository files navigation

dockerfiles

This repo contains Dockerfiles for applications that I find useful.

Upstream repos are monitored and new images will be built an hour after a new release is tagged
Whenever possible, binaries are hardened and images will be optimized for size
Pull images from Docker Hub and GitHub Container Registry
Images are scanned daily using Trivy, Snyk and Anchore. See the GHA workflow
Workflows use commit hashes and Dockerfiles use digest references in accordance with OpenSSF's Security Scorecard and enforced using Allstar
Runners are hardened using Step Security's Harden Runner
Testing
- Container signing
- SBOM generation