chaoss / grimoirelab

GrimoireLab: platform for software development analytics and insights
https://chaoss.github.io/grimoirelab/
GNU General Public License v3.0
500 stars 183 forks source link

docker-compose files should not use `latest` version on Docker images (at least on tags) #670

Open juanpablo-santos opened 6 months ago

juanpablo-santos commented 6 months ago

Hi,

as per title, docker-compose files should not use latest version on Docker images, at least on tags/releases. As it is right now, f.ex., latest mordred is downloaded for any given release, which means unstable code could be unadvertedly put on production.

(other than that, great project, kudos on all your hard work!)