akosiaris added a comment.
In T265504#6578280 <https://phabricator.wikimedia.org/T265504#6578280>, @Zbyszko wrote: > @akosiaris Can we base a blubber enabled project on a 3rd party docker image, provided on docker hub? I was wondering if we have to replicate original dockerfile here (I'd rather base of their image to reduce future maintenance). No, we don't want to base anything that's running in production on 3rd party images due to a variety of issues with them, ranging from security issues to supply chain attacks and integration with our auditing toolset. That's a decision taken long ago, but you can refer to https://www.mediawiki.org/wiki/Wikimedia_Technical_Talks#Episode_6:_A_Deployment_Pipeline_Overview for an overview on the why and hows. TASK DETAIL https://phabricator.wikimedia.org/T265504 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Mstyles, akosiaris Cc: Zbyszko, akosiaris, Ottomata, dcausse, Aklapper, Gehel, Mstyles, Alter-paule, Beast1978, CBogen, Un1tY, Akuckartz, Hook696, Kent7301, joker88john, CucyNoiD, Nandana, Namenlos314, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, Lucas_Werkmeister_WMDE, GoranSMilovanovic, QZanden, EBjune, merbst, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, Mbch331
_______________________________________________ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
