Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request]: Republish released containers without vulnerabilites #33166

Closed
20 tasks
damccorm opened this issue Nov 19, 2024 · 1 comment · Fixed by #33169
Closed
20 tasks

[Feature Request]: Republish released containers without vulnerabilites #33166

damccorm opened this issue Nov 19, 2024 · 1 comment · Fixed by #33169
Assignees

Comments

@damccorm
Copy link
Contributor

What would you like to happen?

Today, when we release beam we also release a set of containers. Over time, these containers can accrue vulnerabilites, many of which can be remediated by recreating the containers without changing the source, since this can enable things like updating the underlying container base image (where most vulnerabilities come from). We should publish these regularly as snapshots which can be consumed on demand as needed from our testing project.

Steps:

  • Add a workflow which allows us to manually do this
  • After verifying that works, set up the workflow to automatically do this based on the configured last RC
  • Update the release guide to explain how/when to update these values

Issue Priority

Priority: 2 (default / most feature requests should be filed as P2)

Issue Components

  • Component: Python SDK
  • Component: Java SDK
  • Component: Go SDK
  • Component: Typescript SDK
  • Component: IO connector
  • Component: Beam YAML
  • Component: Beam examples
  • Component: Beam playground
  • Component: Beam katas
  • Component: Website
  • Component: Infrastructure
  • Component: Spark Runner
  • Component: Flink Runner
  • Component: Samza Runner
  • Component: Twister2 Runner
  • Component: Hazelcast Jet Runner
  • Component: Google Cloud Dataflow Runner
@damccorm
Copy link
Contributor Author

cc/ @liferoad

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant