dotnet / dotnet/docker-tools

Automate the updating of the syft image tag

Open
#1,793 0 comments 0 reactions 0 assignees View on GitHub
area-infrastructure
Dominant language
C#
Stars
181
Forks
67
Avg merge
2d 15h
Merged PRs (30d)
10

Description

The changes from https://github.com/dotnet/docker-tools/pull/1787 add a reference to a pinned image tag of the syft tool: https://github.com/dotnet/docker-tools/blob/810e5c9104d77987bca01db48cb5e908ce27aa5e/eng/common/templates/variables/docker-images.yml#L7

There should be automation which keeps this updated to reference the latest version. One way to do this is by using [Renovate](https://github.com/dotnet/arcade/pull/15594).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.