pack icon indicating copy to clipboard operation
pack copied to clipboard

Update Google's suggested builder

Open edmorley opened this issue 7 months ago • 0 comments

Description

Currently the Pack CLI's suggested builders list contains an outdated Google builder image, gcr.io/buildpacks/builder:v1, which is based on the EOL Ubuntu 18.04 LTS: https://github.com/buildpacks/pack/blob/ce8db3c5d11b8e040fd565632668a697e53e4f87/internal/builder/known_builder.go#L12-L18

Proposed solution

  • Add one of the newer Google builder images documented here: https://cloud.google.com/docs/buildpacks/builders
  • Then either remove gcr.io/buildpacks/builder:v1 from the suggested/trusted builders list entirely, or demote it to only being a "trusted" builder and not also a "suggested" builder (now that the concepts are separate, after https://github.com/buildpacks/pack/pull/2043)

Describe alternatives you've considered

Continue to suggest a builder image that uses an EOL and insecure Ubuntu version.

edmorley avatar Jul 03 '24 14:07 edmorley