[feature] add comparison

This commit is contained in:
ElevenNotes
2025-04-28 10:58:10 +02:00
parent 78cede6065
commit 1c78ef6e04
3 changed files with 14 additions and 9 deletions

View File

@@ -338,22 +338,20 @@ jobs:
# README # README
- name: github / checkout master - name: github / checkout HEAD
continue-on-error: true continue-on-error: true
run: | run: |
git pull git checkout HEAD
git checkout master
- name: docker / setup comparison images - name: docker / setup comparison images
if: env.WORKFLOW_CREATE_COMPARISON == 'true' if: env.WORKFLOW_CREATE_COMPARISON == 'true'
continue-on-error: true continue-on-error: true
run: | run: |
docker image prune -af
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }} docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }}
docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }} docker image pull ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }}
docker image ls &> ./docker.image.ls docker image ls --filter "reference=${{ env.WORKFLOW_CREATE_COMPARISON_IMAGE }}" --format json | jq --raw-output '.Size' &> ./comparison.size0.log
echo "${PWD}" docker image ls --filter "reference=${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }}" --format json | jq --raw-output '.Size' &> ./comparison.size1.log
cat ./docker.image.ls docker run --entrypoint "/bin/sh" --rm ${{ env.WORKFLOW_CREATE_COMPARISON_FOREIGN_IMAGE }} -c id &> ./comparison.id.log
- name: github / create README.md - name: github / create README.md
id: github-readme id: github-readme
@@ -409,7 +407,7 @@ jobs:
git add LICENSE git add LICENSE
fi fi
git commit -m "auto update README.md" git commit -m "auto update README.md"
git push git push origin HEAD:master

3
.json
View File

@@ -20,6 +20,9 @@
"11notes/distroless", "11notes/distroless",
"11notes/distroless:curl" "11notes/distroless:curl"
] ]
},
"comparison":{
"image":"nginx:1.28.0-alpine-slim"
} }
} }
} }

View File

@@ -9,9 +9,13 @@ ${{ github:> }}* This image does not ship with any critical or high rated CVE an
${{ github:> }}* This image is created via a secure, pinned CI/CD process and immune to upstream attacks, most other images have upstream dependencies that can be exploited ${{ github:> }}* This image is created via a secure, pinned CI/CD process and immune to upstream attacks, most other images have upstream dependencies that can be exploited
${{ github:> }}* This image contains a proper health check that verifies the app is actually working, most other images have either no health check or only check if a port is open or ping works ${{ github:> }}* This image contains a proper health check that verifies the app is actually working, most other images have either no health check or only check if a port is open or ping works
${{ github:> }}* This image works as read-only, most other images need to write files to the image filesystem ${{ github:> }}* This image works as read-only, most other images need to write files to the image filesystem
${{ github:> }}* This image is a lot smaller than most other images
If you value security, simplicity and the ability to interact with the maintainer and developer of an image. Using my images is a great start in that direction. If you value security, simplicity and the ability to interact with the maintainer and developer of an image. Using my images is a great start in that direction.
${{ content_comparison }}
${{ title_config }} ${{ title_config }}
```yaml ```yaml
${{ include: ./rootfs/etc/nginx/nginx.conf }} ${{ include: ./rootfs/etc/nginx/nginx.conf }}