dependabot / dependabot/dependabot-core

[Docker] Update docker images used within the codebase

Open
#6,893 3 comments 6 reactions 0 assignees View on GitHub
L: docker T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

## Disclaimer

This is probably very difficult to implement given all the different files these could be stored. I am logging it to hear your thoughts and to see if there are possible ways to do this

## Background

While using [testcontainers](https://www.testcontainers.org/), it is common to define docker images using the following syntax:

```java

// Referring directly to an image on Docker Hub (mysql:8.0.24)
final MySQLContainer mysql = new MySQLContainer<>(
DockerImageName.parse("mysql:8.0.24")
)

final MySQLContainer mysql = new MySQLContainer<>(
DockerImageName.parse("registry.mycompany.com/mirror/mysql:8.0.24")
.asCompatibleSubstituteFor("mysql")
)

```

It would be ideal if dependabot could detect and update them

if parsing all files is too expensive, maybe we could configure specific files to scan.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by searching the repository for DockerImageName.parse and the testcontainers examples in the issue, then map where image references are stored and how Dependabot currently discovers them. Done means Dependabot can detect and propose updates for supported Docker image references, with an agreed approach for limiting scanned files if needed.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
devops
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.