-
Notifications
You must be signed in to change notification settings - Fork 17
Closed
Labels
forgeThe package belongs to NethForgeThe package belongs to NethForgeverifiedAll test cases were verified successfullyAll test cases were verified successfully
Milestone
Description
Brief description
Upgrade the nginx Docker image used in DependencyTrack. Two versions are under consideration: the latest stable nginx:1.28.0 or the current nginx:1.29.0. See PR #23 for the Trivy update and PR #15 for previous nginx updates.
upgrade Trivy
upgrade dependencytrack frontend and apiserver
- Keeps the deployment secure and up-to-date.
- Ensures compatibility and stability by considering both the latest and stable releases.
Proposed solution
- Evaluate the impact and stability of both
nginx:1.28.0andnginx:1.29.0in the DependencyTrack context. - Prefer to upgrade to
nginx:1.28.0if it is more stable, otherwise adoptnginx:1.29.0. - Merge the relevant PR after assessment and testing.
Alternative solutions
- Upgrade directly to
nginx:1.29.0without further assessment, but monitor for potential issues. - Retain the current nginx version if neither upgrade is suitable.
Additional context
- Regular updates to base images are critical for security and reliability, but care is needed with major/minor changes.
See also
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
forgeThe package belongs to NethForgeThe package belongs to NethForgeverifiedAll test cases were verified successfullyAll test cases were verified successfully
Type
Projects
Status
Done