Base
Hardened build
minimal ports, security patches applied at build time
Ortelius on Ubuntu 24.04 LTS
Azure
Developer Tools
an open source SBOM and vulnerability catalog that matches deployed components against CVE data on a schedule and tracks remediation from introduction through fix, with no baked credentials
Overview
Ortelius is an open source software supply chain intelligence platform, part of the Continuous Delivery Foundation. It ingests Software Bills of Materials at build time, matches every deployed component against a public vulnerability database on a 15 minute refresh cycle, and tracks each CVE across its full lifecycle: from the moment it is introduced into a release, through detection in a running environment, to remediation. A multi organization dashboard surfaces Mean Time To Remediate, SLA compliance by severity, vulnerability trend analysis, and compliance framework alignment, with component and dependency data modelled as a graph so queries stay fast as release history and CVE data grow.
Why the cloudimg image
cloudimg ships Ortelius fully assembled rather than three separate services you have to wire together by hand: the API, the dashboard and the graph database backing them are pre configured and answering requests within minutes of launch. No default, shared or blank credentials ship in the image, there is no usable administrator account and no database schema at all until first boot, when a one shot service rotates the database credential, generates a unique signing key and administrator password, proves the new login works and that common defaults are rejected, and only then starts the API and the dashboard, which stay gated shut until that bootstrap completes. Every image ships with a paired deploy guide tested against the exact build and 24/7 cloudimg support.
Common uses
- Ingesting SBOMs from a CI/CD pipeline and continuously matching deployed components against known CVEs
- Tracking vulnerability remediation from introduction to fix with MTTR and SLA compliance reporting
- Building a searchable, multi organization catalog of releases, endpoints and their dependency graphs
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Developer Tools
Docker CE on Windows - Containerization Platform
Developer Tools
Docker Community Edition is the free, open source container runtime that allows you to package applications and their de...
Docker Community Edition
Developer Tools
Docker Community Edition preconfigured across several Linux variants, running containers within minutes of launch.
GitLab CE Self-Hosted DevOps Platform
Developer Tools
Self hosted GitLab CE with CI/CD, a container registry and Let's Encrypt SSL, preconfigured for AWS.
Accent on Ubuntu 24.04 LTS
Developer Tools
Around that core it adds a side by side editor with comments and a review state for each key, conflict detection when a ...
Aa
Apache Allura on Ubuntu 24.04
Developer Tools
Apache Allura is the open source project hosting platform, or forge, that powers SourceForge.
Altair GraphQL Client on Ubuntu 24.04 LTS
Developer Tools
This image runs Altair GraphQL Client 8.5.7, an open source GraphQL IDE, on Ubuntu 24.04 LTS.