-
Notifications
You must be signed in to change notification settings - Fork 83
Change Base Image (?) #69
Comments
I agree with updating the images; we could enable depend-a-bot (now integrated in GitHub) to check for security upgrades for the Dockerfiles. |
my +1 and maybe on merging a build push to docker hub as well.
I think this is a misunderstanding. From a quick look, I've guessed the current image is Debian based were mentioned above are centos. To not produce too much work with reworking the dockerfile my idea was to stick with a Debian based. |
You are right. It would be perfect then :) |
@frafra do you have experience with what is needed to let depandabot scan Dockerfiles? |
@t-book dependabot needs to know the location of the Dockerfile and it assumes it is on the main directory by default: https://dependabot.com/docs/config-file/ |
For security reasons it would be advisable to switch to one of these base images:
As from what I see these are all on
centos
we should check for a newerbuster
image.The text was updated successfully, but these errors were encountered: