Thore CimbalandClaude Fable 5
b6007c50fd
- cve-scan: Trivy-Loop ueber die 29 real deployten Images (Cluster-Inventur 2026-08-01 + Prod-Web-Image); 24h-Intervall, Fehler einzelner Images blockieren nicht - cve-exporter: Stdlib-Exporter mit first_seen-State (Zeitstrahl), Schema trivy_vuln_info/_count/_first_seen/_last_scan gemaess Pflichtfeldern - 3 Alertregeln (CRITICAL sofort, HIGH mit 24h-Daempfung, Scan-Frische) - promtool SUCCESS 9 rules; alle mit room=security - matrix-alerts: Label-basiertes Raum-Routing (MATRIX_ROOM_<NAME>), Edits landen im richtigen Raum via State - Grafana-Dashboard cve-overview: Severity-Stats, CVE-Tabelle mit NVD-Link/Fix-Version/first-seen, Zeitstrahl, Verlauf UNGETESTET bis zum Deploy auf CFGMON (compose up -d). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PKhFj1S3UdD6xL2fbWPeYj
30 lines
1.2 KiB
Plaintext
30 lines
1.2 KiB
Plaintext
clamav/clamav:1.5.3
|
|
coturn/coturn:latest
|
|
docker.io/grafana/alloy:v1.7.5
|
|
docker.io/library/haproxy:3.2-alpine
|
|
docker.io/library/postgres:17.9-bookworm
|
|
docker.io/livekit/livekit-server:v1.10.0
|
|
docker.io/postgres:17-alpine
|
|
docker.io/prometheuscommunity/postgres-exporter:v0.18.1
|
|
ghcr.io/element-hq/ess-helm/matrix-tools:0.7.3
|
|
ghcr.io/element-hq/matrix-authentication-service:1.15.0
|
|
ghcr.io/fluxcd/helm-controller:v1.5.3
|
|
ghcr.io/fluxcd/kustomize-controller:v1.8.3
|
|
ghcr.io/fluxcd/notification-controller:v1.8.3
|
|
ghcr.io/fluxcd/source-controller:v1.8.2
|
|
ghcr.io/goauthentik/server:2026.2.3
|
|
gnuxie/draupnir:v3.1.0
|
|
nginx:1.26-alpine
|
|
oci.element.io/element-admin:0.1.11
|
|
oci.element.io/lk-jwt-service:0.4.2
|
|
oci.element.io/synapse:v1.151.0-ess.1
|
|
quay.io/jetstack/cert-manager-cainjector:v1.14.0
|
|
quay.io/jetstack/cert-manager-controller:v1.14.0
|
|
quay.io/jetstack/cert-manager-webhook:v1.14.0
|
|
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0
|
|
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0
|
|
rohana.axion1337.de/sorb/axion-backup:v2
|
|
rohana.axion1337.de/sorb/axion-secret-rotation:v1
|
|
rohana.axion1337.de/sorb/clamav-http-scanner:v1.0.0
|
|
rohana.axion1337.de/sorb/threadnet-web:v0.3.0
|