One nice feature of buildpacks in CF is that they can be updated without
BOSH when CVEs emerge. If I understand your proposal, packaging web apps
like that would make it more difficult for operators to patch them if they
use vulnerable buildpack versions.

On Mon, Oct 24, 2016 at 6:06 PM, Dr Nic Williams <drnicwilliams(a)gmail.com>
wrote:

Now that the buildpacks themselves are boshified; is/has anyone looked
into using them to make it simpler to package web apps into bosh releases?
E.g. Use the buildpacks for BOSH package compilation/runtime?





On Tue, Oct 25, 2016 at 6:54 AM +1000, "Amit Gupta" <agupta(a)pivotal.io>
wrote:

Awesome!

Adding Sabeti, who is now PMing RelInt and will leverage this once it's
up on bosh.io.

Thanks
Amit

On Monday, October 24, 2016, Stephen Levine <slevine(a)pivotal.io> wrote:

Adding Amit, who requested this recently.

On Mon, Oct 24, 2016 at 4:48 PM, Sam Smith <sasmith(a)pivotal.io> wrote:

Hello,

We would like to submit the following BOSH releases for inclusion in
bosh.io:


- https://github.com/cloudfoundry/staticfile-buildpack-release
- https://github.com/cloudfoundry/go-buildpack-release
- https://github.com/cloudfoundry/ruby-buildpack-release
- https://github.com/cloudfoundry/python-buildpack-release
- https://github.com/cloudfoundry/php-buildpack-release
- https://github.com/cloudfoundry/nodejs-buildpack-release
- https://github.com/cloudfoundry/binary-buildpack-release
- https://github.com/cloudfoundry/java-offline-buildpack-release
- https://github.com/cloudfoundry/java-buildpack-release


Thanks,
CF Buildpacks