potiuk opened a new issue, #52106:
URL: https://github.com/apache/airflow/issues/52106

   ### Body
   
   The "official" Python images are far less official than we thought. They are 
built by the community and while they are somewhat supervised by the "official 
Docker image program" there is really little control over the build and release 
process.
   
   We should change the way we build our images to install Python on base 
debian image from "official" releases rather than use "python" base images for 
it.
   
   That has also some benefits - for example setuptools are quite old in those 
images and they tend to have security issues - if we decide when we rebuild the 
base images we can have better control over what is in the images. 
   
   We might also finally plug it in with automated snyk scanning and break 
releases if snyk does not pass.
   
   ### Committer
   
   - [x] I acknowledge that I am a maintainer/committer of the Apache Airflow 
project.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to