Publish Docker Images in regular Docker group

For the release of version 2 of the SecureCodeBox we want to move
the used Docker images from the experimental group to the regular group

To make this possible I changed the docker group in the CI using
VIMs search and replace (`:%s/scbexperimental/securecodebox/g`)

To make sure that every reference (e.g. in helm charts) is updated I searched for all
occurence using ripgrep (`rg -il "scbexperimental" ./`)

Author: nigthknight

.github/workflows/ci.yaml

@@ -68,7 +68,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/operator
+          repository: securecodebox/operator
           tag_with_ref: true
           tag_with_sha: true
           path: ./operator/
@@ -90,7 +90,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/lurcher
+          repository: securecodebox/lurcher
           tag_with_ref: true
           tag_with_sha: true
           path: ./lurcher/
@@ -105,7 +105,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-sdk-nodejs
+          repository: securecodebox/parser-sdk-nodejs
           path: ./parser-sdk/nodejs/
           tag_with_ref: true
           tag_with_sha: true
@@ -116,7 +116,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-amass
+          repository: securecodebox/parser-amass
           path: ./scanners/amass/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -126,7 +126,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-kube-hunter
+          repository: securecodebox/parser-kube-hunter
           path: ./scanners/kube-hunter/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -136,7 +136,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-ncrack
+          repository: securecodebox/parser-ncrack
           path: ./scanners/ncrack/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -146,7 +146,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-nikto
+          repository: securecodebox/parser-nikto
           path: ./scanners/nikto/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -156,7 +156,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-nmap
+          repository: securecodebox/parser-nmap
           path: ./scanners/nmap/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -166,7 +166,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-ssh-scan
+          repository: securecodebox/parser-ssh-scan
           path: ./scanners/ssh_scan/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -176,7 +176,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-sslyze
+          repository: securecodebox/parser-sslyze
           path: ./scanners/sslyze/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -186,7 +186,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-test-scan
+          repository: securecodebox/parser-test-scan
           path: ./scanners/test-scan/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -196,7 +196,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-trivy
+          repository: securecodebox/parser-trivy
           path: ./scanners/trivy/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -206,7 +206,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-zap
+          repository: securecodebox/parser-zap
           path: ./scanners/zap/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -216,7 +216,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/parser-wpscan
+          repository: securecodebox/parser-wpscan
           path: ./scanners/wpscan/parser/
           tag_with_ref: true
           tag_with_sha: true
@@ -233,7 +233,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/hook-sdk-nodejs
+          repository: securecodebox/hook-sdk-nodejs
           path: ./hook-sdk/nodejs/
           tag_with_ref: true
           tags: "ci-local"
@@ -243,7 +243,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/persistence-elastic
+          repository: securecodebox/persistence-elastic
           path: ./hooks/persistence-elastic/
           tag_with_ref: true
           build_args: baseImageTag=ci-local
@@ -252,15 +252,15 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/persistence-elastic-dashboard-importer
+          repository: securecodebox/persistence-elastic-dashboard-importer
           path: ./hooks/persistence-elastic/dashboardImporter/
           tag_with_ref: true
       - uses: docker/build-push-action@v1
         name: "Build & Push GenericWebhook Hook Image"
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/generic-webhook
+          repository: securecodebox/generic-webhook
           path: ./hooks/generic-webhook/
           tag_with_ref: true
           build_args: baseImageTag=ci-local
@@ -269,7 +269,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/hook-imperative-subsequent-scans
+          repository: securecodebox/hook-imperative-subsequent-scans
           path: ./hooks/imperative-subsequent-scans/
           tag_with_ref: true
           build_args: baseImageTag=ci-local
@@ -278,7 +278,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/hook-declarative-subsequent-scans
+          repository: securecodebox/hook-declarative-subsequent-scans
           path: ./hooks/declarative-subsequent-scans/
           tag_with_ref: true
           tag_with_sha: true
@@ -288,7 +288,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/update-field
+          repository: securecodebox/update-field
           path: ./hooks/update-field/
           tag_with_ref: true
           tag_with_sha: true
@@ -304,7 +304,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/ncrack
+          repository: securecodebox/ncrack
           path: ./scanners/ncrack/scanner/
           # Note: not prefixed with a "v" as this seems to match ncrack versioning standards
           tags: "0.7,latest"
@@ -313,7 +313,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/nmap
+          repository: securecodebox/nmap
           path: ./scanners/nmap/scanner/
           # Note: not prefixed with a "v" as this seems to match nmap versioning standards
           tags: "7.80,7.80-2,latest"
@@ -322,7 +322,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/kube-hunter
+          repository: securecodebox/kube-hunter
           path: ./scanners/kube-hunter/scanner/
           # Note: not prefixed with a "v" as this matches the aquasec/kube-hunter tags
           tags: "0.3.0,latest"
@@ -331,7 +331,7 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-          repository: scbexperimental/test-scan
+          repository: securecodebox/test-scan
           path: ./scanners/test-scan/scanner/
           # Note: not prefixed with a "v" as this seems to match nmap versioning standards
           tags: "latest"

docs/user-guide/README.md

@@ -33,7 +33,7 @@ The result should contain a hook for declarative subsequent scans.
 
 ```bash
 NAME                                          TYPE       IMAGE
-combined-scans-declarative-subsequent-scans   ReadOnly   docker.io/scbexperimental/hook-declarative-subsequent-scans:latest
+combined-scans-declarative-subsequent-scans   ReadOnly   docker.io/securecodebox/hook-declarative-subsequent-scans:latest
 ```
 
 ### Verify CascadingRules
@@ -135,4 +135,4 @@ pop3s-tls-scan   sslyze         non-invasive   light
 smtps-tls-scan   sslyze         non-invasive   light
 ssh-scan         ssh-scan       non-invasive   light
 zap-http         zap-baseline   non-invasive   medium
-```
+```

hooks/declarative-subsequent-scans/Dockerfile

@@ -13,7 +13,7 @@ RUN npm ci
 COPY hook.ts scan-helpers.ts kubernetes-label-selector.ts ./
 RUN npm run build
 
-FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
+FROM securecodebox/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=install --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --from=build --chown=app:app /home/app/hook.js /home/app/scan-helpers.js /home/app/kubernetes-label-selector.js ./

hooks/declarative-subsequent-scans/README.md

@@ -21,7 +21,7 @@ helm upgrade --install dssh ./hooks/declarative-subsequent-scans/
 ```bash
 kubectl get ScanCompletionHooks
 NAME   TYPE       IMAGE
-dssh   ReadOnly   docker.io/scbexperimental/hook-declarative-subsequent-scans:latest
+dssh   ReadOnly   docker.io/securecodebox/hook-declarative-subsequent-scans:latest
 ```
 
 ## CascadingScan Rules
@@ -113,4 +113,4 @@ pop3s-tls-scan   sslyze         non-invasive   light
 smtps-tls-scan   sslyze         non-invasive   light
 ssh-scan         ssh-scan       non-invasive   light
 zap-http         zap-baseline   non-invasive   medium
-```
+```

hooks/declarative-subsequent-scans/values.yaml

@@ -3,6 +3,6 @@
 # Declare variables to be passed into your templates.
 
 image:
-  repository: docker.io/scbexperimental/hook-declarative-subsequent-scans
+  repository: docker.io/securecodebox/hook-declarative-subsequent-scans
   # image.tag - defaults to the charts version
   tag: null

hooks/generic-webhook/Dockerfile

@@ -5,7 +5,7 @@ WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
+FROM securecodebox/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./hook.js ./hook.js

hooks/generic-webhook/values.yaml

@@ -5,6 +5,6 @@
 webhookUrl: "http://example.com"
 
 image:
-  repository: docker.io/scbexperimental/generic-webhook
+  repository: docker.io/securecodebox/generic-webhook
   # image.tag - defaults to the charts version
   tag: null

hooks/imperative-subsequent-scans/Dockerfile

@@ -1,6 +1,6 @@
 # This image doesn't install the hooks dependencies, as it only has the @kubernetes/client-node dependencies which is already installed via the hook-sdk
 
 ARG baseImageTag
-FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
+FROM securecodebox/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --chown=app:app hook.js scan-helpers.js ./

hooks/imperative-subsequent-scans/values.yaml

@@ -17,6 +17,6 @@ cascade:
   nmapZapBaseline: false
 
 image:
-  repository: docker.io/scbexperimental/hook-imperative-subsequent-scans
+  repository: docker.io/securecodebox/hook-imperative-subsequent-scans
   # image.tag - defaults to the charts version
   tag: null

hooks/persistence-elastic/Dockerfile

@@ -5,7 +5,7 @@ WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
+FROM securecodebox/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./hook.js ./hook.js