[cdxgen-secure] Anyone using this image in production?

[prabhu]

The image comes with some sane secure defaults. Plus it uses CMD instead of ENTRYPOINT, so ideal for use as an image to run the build tools such as maven, npm, etc in CI environments.

https://github.com/CycloneDX/cdxgen/blob/master/ci/Dockerfile-secure

Let us know how we can improve this image, so that we can secure all other base images as well over time.

[spaasis]

@prabhu Could you maybe document the usage of this in a more detailed way? I gave it a try in Azure pipelines where the standard image works, but no matter the NODE_OPTIONS I tried, the container would not respond to api calls on localhost:9090 like it does on the base image