André Bauer

On best practice for docker containers is to be immutable. This means a container should not change it contents while running. Most environments nowdays also enforcing read only filesystems in...

You could still do it by using a writable volume in a container ;-) I would still prefer to rebuild my container (at least on a daily basis). This will...

Thanks for the hint. I'll add some changes later this or next week. At least the user creation in the entrypoint is wrong and should be moved to the dockerfile...

I've adjusted the container (see updated pr description above). Can be tested via: Cron mode: ``` docker run -it --rm monotek/cvdupdate:0.0.2 ``` Serve mode: ``` docker run -it --net host...

@ismvru & @micahsnyder did you have time to have a look?

i updated the pr to use ghcr.io, as no extra github secrets are needed for this.

friendly ping :)

You mean "/cvdupdate/.cvdupdate/state.json"? Is this not wanted as it contains the "last modified" & "last checked" fields with the timestamps? If we would remove the file the information about the...

I see similar issues with v1.12.0-rc.5. For me the polr resources in a namesapce are constantly deleted and recreated. Also a lot of policies which worked before fail now sometimes...

Same with v1.12.0.