retire.js
retire.js copied to clipboard
Docker integration
Hi,
to use retire.js during the deployment in Jenkins I created a dockerfile (https://github.com/wurstbrot/retire.js). Is there an interest to integrate it into this repository?
The use case here would be someone that has docker installed, but not node.js++ I guess that makes sense. Doesn't hurt at least.
You should create extra image layer with retire to run scan or your base image with code... at least this is how you should use Docker. see for example https://medium.com/@jessgreb01/digging-into-docker-layers-c22f948ed612 and also https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds