dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

Support for Packer

Open hendrikhalkow opened this issue 4 years ago • 3 comments

As an SRE, I'd like to build virtual machine images via Packer. These virtual machine images depend on existing virtual machine images. The getting started guide references the parent image via source_ami_filter to get the latest image of whatever, but I'd rather use source_ami which would be kept up to date via Dependabot.

Consider the following example:

source "amazon-ebs" "this" {
  // This reference needs to be kept up to date via Packer,
  // similar to the `source_ami_filter` in the example at
  // https://packer.io/intro/getting-started/build-image.html
  source_ami = "ami-..."

  ami_name = "..."
  // ...
}

build {
 // ...
}

hendrikhalkow avatar Mar 18 '20 00:03 hendrikhalkow

Related to this, as a heavy user of Terraform it would be a great feature if Dependabot's Terraform support could be updated to track and recommend AMI updates to public images.

khorwood avatar Mar 30 '22 13:03 khorwood

any news on this one?

algo7 avatar Aug 07 '23 21:08 algo7

Any news on this?

rzmnd avatar May 10 '24 07:05 rzmnd