castive/scratch repository overview

⁠Base Images

These OCI images serve as base images for further application/environment development. New images get built every 24 hours to ensure security patches get quickly applied.

Note: these images are build with Kaniko⁠ NOT BuildKit.

⁠Images

All images try to meet the following criteria:

• Warning when running as root (id=0)
• Based on Alpine where possible

⁠Alpine

• Alpine 3
• Latest package updates
• Non-root account created

⁠Gradle

• AdoptOpenJDK 14 - Alpine base
• Latest package updates
• Runs with non-root account

⁠Maven

• AdoptOpenJDK 14 - Alpine base
• Latest package updates
• Runs with non-root account

⁠Tomcat Native

• Latest Tomcat APR bindings
• AdoptOpenJDK 14 - Alpine base
• Latest package updates
• Non-root account created

⁠Scratch⁠

This image comes with literally nothing.

• Non-root account created
• Default Alpine CA certificates