Image hygiene
Images that make "what runs" hard to know or to trust: moving tags, tags pushed again, registries outside the allowed list, and images without a known digest.
| Image | Problem | Where |
|---|---|---|
| grafana/grafana:11.2.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / grafana / grafana staging / demo-staging / grafana / grafana |
| istio/proxyv2:1.23.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / payments-api / istio-proxy staging / demo-staging / payments-api / istio-proxy |
| postgres:15.5 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / shop-db / shop-db |
| postgres:15.6 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / postgres / postgres |
| postgres:15.7 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / postgres / postgres dev / demo-dev / shop-db / shop-db staging / demo-staging / postgres / postgres staging / demo-staging / shop-db / shop-db |
| redis:7.2.4 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / redis / redis |
| redis:7.2.5 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / redis / redis staging / demo-staging / redis / redis |
| traefik:v3.1.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / traefik / traefik staging / demo-staging / traefik / traefik |
| ghcr.io/acme/checkout:2.3.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / checkout / checkout prod / demo-prod-us / checkout / checkout |
| ghcr.io/acme/checkout:2.4.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / checkout / checkout staging / demo-staging / checkout / checkout |
| ghcr.io/acme/payments-api:1.4.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-us / payments-api / payments-api |
| ghcr.io/acme/payments-api:1.5.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / payments-api / payments-api |
| ghcr.io/acme/payments-api:1.6.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / payments-api / payments-api staging / demo-staging / payments-api / payments-api |
| ghcr.io/acme/report:0.9.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / nightly-report / report |
| quay.io/keycloak/keycloak:24.0.5 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / keycloak / keycloak |
| quay.io/keycloak/keycloak:25.0.1 | unpinned no digest reported; the tag could be pushed again unnoticed | staging / demo-staging / keycloak / keycloak |
| quay.io/keycloak/keycloak:25.0.6 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / keycloak / keycloak |