-
Sub-task
-
Resolution: Done
-
Major
-
3.1.0.GA
-
None
-
False
-
None
-
False
While scanning the che-code repo, I found a reference to a "tmp" image owned by fbenoit@redhat.com:
image: 'quay.io/fbenoit/tmp:1.60.1c' command: ["/checode/entrypoint-init-container.sh"] volumeMounts: - name: checode path: /checode memoryLimit: 128Mi memoryRequest: 32Mi cpuLimit: 500m cpuRequest: 30m - name: che-code-runtime-description container: image: 'quay.io/fbenoit/alpine:jdk11'
Unclear if these images are actually used during a build, and therefore how they need to be handled when productizing.
This is the risk we run by productizing an incubating project ... not everything is hardened and comes from official repos.