timothyswan/defectdojo-nginx repository overview

This image fronts the DefectDojo uWSGI socket and serves the collected static assets (CSS, JS, fonts, fontawesomefree, debug toolbar). The static files are generated at build time by running manage.py collectstatic inside the already-built defectdojo-django image, then COPYed into a runtime layered on hi/nginx:1.30.0.

The build is sequenced after defectdojo-django — CI tags the django image locally as defectdojo-django:2.58.2-rhhi and the nginx Containerfile pulls it as a builder stage.

⁠Usage

Consumed by the DefectDojo Quadlet stack. See defectdojo/quadlet/defectdojo-nginx.container.example.

⁠Supply chain

• Base image: registry.access.redhat.com/hi/nginx:1.30.0 (nginx 1.30.0)
• Upstream commit: 6eab87386d504c4bc164f87b6aae58a8e0c1b8d2 (DefectDojo v2.58.2)
• Static files: regenerated from the same upstream commit via the django image
• Signed: cosign key-only signature (no Rekor transparency log)
• SBOM: CycloneDX JSON attached as OCI attestation
• Provenance: SLSA Level 3 attached as OCI attestation