Skip to content

Upgrade nginx, DependencyTrack and trivy #7590

@stephdl

Description

@stephdl

Brief description

Upgrade the nginx Docker image used in DependencyTrack. Two versions are under consideration: the latest stable nginx:1.28.0 or the current nginx:1.29.0. See PR #23 for the Trivy update and PR #15 for previous nginx updates.
upgrade Trivy
upgrade dependencytrack frontend and apiserver

  • Keeps the deployment secure and up-to-date.
  • Ensures compatibility and stability by considering both the latest and stable releases.

Proposed solution

  • Evaluate the impact and stability of both nginx:1.28.0 and nginx:1.29.0 in the DependencyTrack context.
  • Prefer to upgrade to nginx:1.28.0 if it is more stable, otherwise adopt nginx:1.29.0.
  • Merge the relevant PR after assessment and testing.

Alternative solutions

  • Upgrade directly to nginx:1.29.0 without further assessment, but monitor for potential issues.
  • Retain the current nginx version if neither upgrade is suitable.

Additional context

  • Regular updates to base images are critical for security and reliability, but care is needed with major/minor changes.

See also

Metadata

Metadata

Assignees

No one assigned

    Labels

    forgeThe package belongs to NethForgeverifiedAll test cases were verified successfully

    Projects

    Status

    Done

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions