Add warning hint when using latest tag on images in microservices

Answered

Follow

anders.borud

• September 26, 2019 07:41

The latest tag is quite vulnerable and should be avoided in a production setting for any given microservice. I suggest that we add a hint or a warning in the editor if latest or no tag i defined. More on the topic here: https://vsupalov.com/docker-latest-tag/

This is the warning used in kubernetes docs:

You should avoid using the :latest tag when deploying containers in production as it is harder to track which version of the image is running and more difficult to roll back properly.

2

• Official comment

  

  Geir Ove Grønmo

  • November 30, 2021 08:38

  We have decided not to prioritize this at the current time. This is a general problem with all mutable tags (and not specific to Sesam), and it is not specific to "latest". We recommend using semantic versioning of Docker images.

  Comment actions Permalink

Please sign in to leave a comment.