Skip to content

feat(worker): use GHCR images for all security tool components | ENG-167#272

Merged
LuD1161 merged 1 commit intomainfrom
feat/eng-167-use-ghcr-images
Feb 7, 2026
Merged

feat(worker): use GHCR images for all security tool components | ENG-167#272
LuD1161 merged 1 commit intomainfrom
feat/eng-167-use-ghcr-images

Conversation

@LuD1161
Copy link
Contributor

@LuD1161 LuD1161 commented Feb 7, 2026

Summary

  • Migrate all 9 tool container image references from third-party registries (Docker Hub, upstream GHCR) to our own ghcr.io/shipsecai/ registry
  • Ensures reliability by eliminating dependency on external registries that can deprecate tags or have outages
  • All images are public and multi-arch (amd64 + arm64) on our GHCR

Images Updated

Tool Old Image New Image
Subfinder projectdiscovery/subfinder:v2.12.0 ghcr.io/shipsecai/subfinder:v2.12.0
DNSX projectdiscovery/dnsx:v1.2.2 ghcr.io/shipsecai/dnsx:v1.2.2
httpx projectdiscovery/httpx:v1.7.4 ghcr.io/shipsecai/httpx:v1.7.4
Naabu projectdiscovery/naabu:v2.3.7 ghcr.io/shipsecai/naabu:v2.3.7
Notify projectdiscovery/notify:v1.0.7 ghcr.io/shipsecai/notify:v1.0.7
Amass owaspamass/amass:v5.0.1 ghcr.io/shipsecai/amass:v5.0.1
TruffleHog trufflesecurity/trufflehog:v3.92.1 ghcr.io/shipsecai/trufflehog:v3.93.1
Prowler prowlercloud/prowler:5.14.2 ghcr.io/shipsecai/prowler:5.14.2
OpenCode ghcr.io/anomalyco/opencode ghcr.io/shipsecai/opencode:1.1.53

Already on GHCR (unchanged): nuclei, shuffledns-massdns, supabase-scanner

Files Changed (20 files)

  • Source: 9 component files updated with new image references
  • Tests: 7 test files updated to match new image strings
  • Docs: security.mdx, component-development.mdx, worker/README.md updated
  • Scripts: scratch/opencode-mcp-test/run_test.sh updated

Test plan

  • All 528 unit tests pass (0 failures)
  • Lint-staged passes (eslint + prettier)
  • Verify images pull correctly in staging environment
  • Run a sample workflow end-to-end with at least one migrated tool

Migrate all tool container image references from third-party registries
(Docker Hub, upstream GHCR) to our own ghcr.io/shipsecai/ registry for
improved reliability and version pinning.

Images updated:
- subfinder: projectdiscovery/subfinder → ghcr.io/shipsecai/subfinder
- dnsx: projectdiscovery/dnsx → ghcr.io/shipsecai/dnsx
- httpx: projectdiscovery/httpx → ghcr.io/shipsecai/httpx
- naabu: projectdiscovery/naabu → ghcr.io/shipsecai/naabu
- notify: projectdiscovery/notify → ghcr.io/shipsecai/notify
- amass: owaspamass/amass → ghcr.io/shipsecai/amass
- trufflehog: trufflesecurity/trufflehog → ghcr.io/shipsecai/trufflehog
- prowler: prowlercloud/prowler → ghcr.io/shipsecai/prowler
- opencode: ghcr.io/anomalyco/opencode → ghcr.io/shipsecai/opencode

Signed-off-by: Aseem Shrey <LuD1161@users.noreply.github.com>
@LuD1161 LuD1161 merged commit db10cc8 into main Feb 7, 2026
3 checks passed
@LuD1161 LuD1161 deleted the feat/eng-167-use-ghcr-images branch February 7, 2026 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant