zapier / prom-aggregation-gateway

An aggregating push gateway for Prometheus
Mozilla Public License 2.0
122 stars 27 forks source link

split alpine versions in build process #72

Closed mplachter closed 1 year ago

mplachter commented 1 year ago

Splitting the Alpine Go build container Version and container runtime version to fix security issues documented in https://github.com/zapier/prom-aggregation-gateway/issues/69

Before the build version and runtime version were set to alpine:3.17 since GoLang Alpine build container only has a tag for 3.17 wanted to make this independent for minor security bumps for the runtime containers.

Also adding latest tag to be pushed on deployments as the default helm charts reference the latest image tag Referenced in https://github.com/zapier/prom-aggregation-gateway/issues/68