search

Tecnativa / docker-socket-proxy

Proxy over your Docker socket to restrict which requests it accepts
Apache License 2.0
1.3k stars 156 forks source link

Clean versioning and accountability to avoid supply-chain-attacks #93

Closed bluepuma77 closed 12 months ago

bluepuma77 commented 12 months ago

People are using docker-socket-proxy to reduce the risk of having services access the docker socket directly. At the same time they put a lot of trust in the docker-socket-proxy software and containers by giving it almost complete access to the system.

It would be great to have a common versioning on GitHub and Docker Hub to show a little bit more that everything is under control. Currently the last commit on GitHub is from Dec 2022, the last release is from Jan 2021, but there is a new Docker Hub version from July 2023. Are they all the same? What is the difference?

Who is in control of and creates the Docker Hub version?

pedrobaeza commented 12 months ago

The version is updated regularly since #71. The explanation about why is there.