dependabot / cli

A tool for testing and debugging Dependabot update jobs.
MIT License
242 stars 38 forks source link

air-gapped containers #312

Open jakecoffman opened 6 months ago

jakecoffman commented 6 months ago

Docker has a new experimental feature: air-gapped containers

This could be useful to simplify how the CLI runs an update.

Currently it creates a Docker network so the Updater image can only communicate with the Proxy, and the Proxy is allowed to access to the host network.

With air-gapped containers we could restrict the Updater image to communicate only with the Proxy, but run the Proxy directly on the host instead of in a container.