hyperledger / aries-cloudagent-python

Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments.
https://wiki.hyperledger.org/display/aries
Apache License 2.0
406 stars 511 forks source link

List of supported/stable images for use #2993

Closed pradeepp88 closed 1 month ago

pradeepp88 commented 4 months ago

Currently there are many images available in GHCR repo and there is no documentation where we can find stable images/versions for use. The previous major version images still has vulnerabilities, ex: 0.11.0 which has been fixed in 0.11.1.

Creating this issue to create a documentation where the community can find a list of supported or stable docker images for use.

Once we have the list of supported images, we can setup a workflow to regularly scan for vulnerabilities as the vulnerability list is being constantly updated.

pradeepp88 commented 4 months ago

cc: @WadeBarnes @swcurran

pradeepp88 commented 4 months ago

Adding some reference RFCs and Release Documentations:

Aries RFC which has some standard process for release management- https://github.com/hyperledger/aries-rfcs/tree/f5b3cd1319a6df74f830cd51b623342104bd5b30/concepts/0799-long-term-support

This is inspired from the Hyperledger Fabric Release Strategy - https://github.com/hyperledger/fabric-rfcs/blob/main/text/0005-lts-release-strategy.md

We can have a section in Readme for releases like - https://github.com/hyperledger/fabric?tab=readme-ov-file#releases

swcurran commented 1 month ago

Resolved with this PR #3143 that enccompasses and extends #3051