dependabot / dependabot/dependabot-core

Add support for OS package manager like apt and apk in Dockerfiles

Open
#2,129 30 comments 123 reactions 0 assignees View on GitHub
Keep T: new-ecosystem
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 14h
Merged PRs (30d)
156

Description

While your docker support is great to keep the `FROM` directive updated, it could be enhanced by including support for the OS package managers (like APT for Debian and derivatives, APK for Alpine...).

With this addition we could completely rely on dependabot to keep our Docker images updated, instead of having to keep that manually updated.

Example 1 (APT on Ubuntu):

```shell
apt-get install apache2=2.2.20-1ubuntu1 \
apache2.2-common=2.2.20-1ubuntu1 \
apache2.2-bin=2.2.20-1ubuntu1 \
apache2-mpm-worker=2.2.20-1ubuntu1
```

Example 2 (APK on Alpine):

`apk add packagename=1.2.3-suffix`

We could even get fancy and support version constraints, like >=.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.