search

enjin / platform

Enjin Platform is the most powerful and advanced open-source framework for building NFT platforms.
GNU Lesser General Public License v3.0
11 stars 10 forks source link

[PLA-1928] Upgrade platform decoder to v1.9.1 #46

Closed leonardocustodio closed 2 months ago

leonardocustodio commented 2 months ago

PR Type

enhancement, configuration changes

Description

Changes walkthrough 📝

Relevant files
Enhancement
docker-compose.yml
Upgrade `decoder` service image version in Docker Compose
docker-compose.yml
  • Updated the decoder service image version from v1.9.0 to v1.9.1.
    		•  +1/-1     

    💡 PR-Agent usage: Comment /help on the PR to get a list of all available PR-Agent tools and their descriptions

    github-actions[bot] commented 2 months ago

    PR Reviewer Guide 🔍

    ⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
    🧪 No relevant tests
    🔒 No security concerns identified
    ⚡ No key issues to review
    github-actions[bot] commented 2 months ago

    PR Code Suggestions ✨

    CategorySuggestion                                                                                                                                    Score
    Security
    Use a SHA256 digest for Docker images to ensure immutability and security ___ **To ensure that the decoder service always uses the most secure and up-to-date
    version, consider using a more specific tag than just the version number, such as
    the SHA256 digest of the image. This approach prevents issues related to mutable
    tags and ensures that the exact intended version of the image is used.** [docker-compose.yml [31]](https://github.com/enjin/platform/pull/46/files#diff-e45e45baeda1c1e73482975a664062aa56f20c03dd9d64a827aba57775bed0d3R31-R31) ```diff -image: enjin/platform-decoder:v1.9.1 +image: enjin/platform-decoder@sha256: ```
    Suggestion importance[1-10]: 9 Why: Using a SHA256 digest for Docker images enhances security by ensuring that the exact intended version of the image is used, preventing issues related to mutable tags. This is a significant improvement for maintaining a secure and reliable deployment.
    		9