hello-php
PHP demo for the Docker → Helm → Kubernetes lifecycle, with Ring Promoter CVE gates on k3s1.
{
"message": "Hello from PHP!",
"version": "0.2.0-c02d149",
"ring": "demo",
"cve_fixed": "CVE-2024-4577,CVE-2024-11235,CVE-2025-1219,CVE-2019-11043,CVE-2012-1823",
"php": "8.3.19"
}
CVE patching
Base image
php:8.3.19-cli-alpine + apk upgrade; same digest
promoted int → test → acc → prod.
- Patched:
CVE-2024-4577,CVE-2024-11235,CVE-2025-1219,CVE-2019-11043,CVE-2012-1823 - PHP runtime:
8.3.19 - Deploy ring:
demo
Endpoints
GET /api/hello— the greeting JSON aboveGET /api/cves— decade CVE ledger + Dockerfile patch statusGET /health— version-verified health for Ring PromoterGET /metrics— Prometheus gate metrics for GrafanaGET /login— sign in with OpsAPI, then/dashboard