Image hygiene
Images that make "what runs" hard to know or to trust: moving tags, tags pushed again, registries outside the allowed list, and images without a known digest.
| Image | Problem | Where |
|---|---|---|
| docker.elastic.co/elasticsearch/elasticsearch:8.15.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev-us / search / search staging / demo-staging-us / search / search |
| fluent/fluent-bit:3.0.7 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-nomad / fluent-bit / fluent-bit |
| gitea/gitea:1.22.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-docker-tools / gitea / gitea |
| grafana/grafana:11.2.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / grafana / grafana staging / demo-staging / grafana / grafana |
| hashicorp/vault:1.17.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-nomad / vault / vault |
| istio/proxyv2:1.23.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / payments-api / istio-proxy staging / demo-staging / payments-api / istio-proxy |
| nginx:1.26.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-docker-tools / nginx / nginx |
| postgres:15.5 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / shop-db / shop-db |
| postgres:15.6 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / postgres / postgres |
| postgres:15.7 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / postgres / postgres dev / demo-dev / shop-db / shop-db staging / demo-staging / postgres / postgres staging / demo-staging / shop-db / shop-db |
| rabbitmq:3.12.14 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-us / rabbitmq / rabbitmq |
| rabbitmq:3.13.6 | unpinned no digest reported; the tag could be pushed again unnoticed | staging / demo-staging-us / rabbitmq / rabbitmq |
| rabbitmq:4.0.2 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev-us / rabbitmq / rabbitmq |
| redis:7.2.4 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / redis / redis |
| redis:7.2.5 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / redis / redis staging / demo-staging / redis / redis |
| traefik:v3.1.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / traefik / traefik staging / demo-staging / traefik / traefik |
| ghcr.io/acme/checkout:2.3.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / checkout / checkout prod / demo-prod-us / checkout / checkout |
| ghcr.io/acme/checkout:2.4.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / checkout / checkout staging / demo-staging / checkout / checkout |
| ghcr.io/acme/notifications:0.15.2 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev-us / notifications / notifications prod / demo-prod-us / notifications / notifications staging / demo-staging-us / notifications / notifications |
| ghcr.io/acme/orders-api:3.10.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev-us / orders-api / orders-api staging / demo-staging-us / orders-api / orders-api |
| ghcr.io/acme/orders-api:3.9.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-us / orders-api / orders-api |
| ghcr.io/acme/payments-api:1.4.2 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-us / payments-api / payments-api |
| ghcr.io/acme/payments-api:1.5.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / payments-api / payments-api |
| ghcr.io/acme/payments-api:1.6.0 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / payments-api / payments-api staging / demo-staging / payments-api / payments-api |
| ghcr.io/acme/report:0.9.1 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / nightly-report / report |
| ghcr.io/acme/webhook-relay:0.8.0 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-lambda / webhook-relay / webhook-relay |
| public.ecr.aws/lambda/nodejs:20 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-lambda / invoice-pdf / invoice-pdf |
| public.ecr.aws/lambda/python:3.9 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-lambda / image-resizer / image-resizer |
| quay.io/keycloak/keycloak:24.0.5 | unpinned no digest reported; the tag could be pushed again unnoticed | prod / demo-prod-eu / keycloak / keycloak |
| quay.io/keycloak/keycloak:25.0.1 | unpinned no digest reported; the tag could be pushed again unnoticed | staging / demo-staging / keycloak / keycloak |
| quay.io/keycloak/keycloak:25.0.6 | unpinned no digest reported; the tag could be pushed again unnoticed | dev / demo-dev / keycloak / keycloak |