Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PLA-1928] Upgrade platform decoder to v1.9.1 #46

Merged
merged 1 commit into from
Aug 5, 2024

Conversation

leonardocustodio
Copy link
Member

@leonardocustodio leonardocustodio commented Aug 5, 2024

PR Type

enhancement, configuration changes


Description

  • Updated the decoder service image version in docker-compose.yml from v1.9.0 to v1.9.1.

Changes walkthrough 📝

Relevant files
Enhancement
docker-compose.yml
Upgrade `decoder` service image version in Docker Compose

docker-compose.yml

  • Updated the decoder service image version from v1.9.0 to v1.9.1.
  • +1/-1     

    💡 PR-Agent usage:
    Comment /help on the PR to get a list of all available PR-Agent tools and their descriptions

    Signed-off-by: Leonardo Custodio <[email protected]>
    Copy link

    github-actions bot commented Aug 5, 2024

    PR Reviewer Guide 🔍

    ⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
    🧪 No relevant tests
    🔒 No security concerns identified
    ⚡ No key issues to review

    Copy link

    github-actions bot commented Aug 5, 2024

    PR Code Suggestions ✨

    CategorySuggestion                                                                                                                                    Score
    Security
    Use a SHA256 digest for Docker images to ensure immutability and security

    To ensure that the decoder service always uses the most secure and up-to-date
    version, consider using a more specific tag than just the version number, such as
    the SHA256 digest of the image. This approach prevents issues related to mutable
    tags and ensures that the exact intended version of the image is used.

    docker-compose.yml [31]

    -image: enjin/platform-decoder:v1.9.1
    +image: enjin/platform-decoder@sha256:<digest>
     
    Suggestion importance[1-10]: 9

    Why: Using a SHA256 digest for Docker images enhances security by ensuring that the exact intended version of the image is used, preventing issues related to mutable tags. This is a significant improvement for maintaining a secure and reliable deployment.

    9

    @leonardocustodio leonardocustodio merged commit f4cf4ca into master Aug 5, 2024
    1 check passed
    @leonardocustodio leonardocustodio deleted the upgrade-decoder branch August 5, 2024 19:39
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Development

    Successfully merging this pull request may close these issues.

    2 participants