Discussion: How to address the use of outdated images #97
Labels
area/engineering
Requires attention from engineering: focus on foundational components or platform DevOps
component/jupyter
component/remote-desktop
kind/design
priority/longterm
How do we determine when a container must be updated? For example, what defines an image as critically vulnerable, or unacceptably out of date?
And once we have those definitions, how should the update be enacted? Should we patch the container (with the latest version, the nearest acceptable version, or a custom variant that introduces only necessary changes)? Or treat it on an individual basis by contacting and discussing with the person or team running that container? In the latter case, we must ensure we have this contact information, but there is an upside: some out-of-date containers are no longer necessary, and the resolution could be to remove it and free the resources, something that would not be as discoverable with an automated update.
The text was updated successfully, but these errors were encountered: