3 ms·
Never ever use :latest unless its in your docker-compose DEV file. Try to treat docker images like you would dependencies. We always lock down to specific vers
by bearjaws 9y ago
Never ever use :latest unless its in your docker-compose DEV file. Try to treat docker images like you would dependencies.
We always lock down to specific versions, but we also use a self hosted docker mirror to cache everything anyway.
- moondev 9y agoother labels are mutable too though. That's why this broke for other tags beside latest. Use the hash instead for a hard link, but obviously won't get any security updates.
- wereHamster 9y agoYou subscribe to notifications about security updates, but never blindly accept them.
- urda 9y agoSecurity updates should be vetted and not auto-accepted. There's no problem here.
- moondev 9y agoSounds like a problem that should be solved on the ci/cd level and not the underlying container registry. People use containers in different ways.