docker icon indicating copy to clipboard operation
docker copied to clipboard

Docker Hub description is out of date

Open lemeurherve opened this issue 3 months ago • 4 comments

Jenkins and plugins versions report

Environment
N/A

What Operating System are you using (both controller, and any agents involved in the problem)?

N/A

Reproduction steps

  1. Go to https://hub.docker.com/r/jenkins/jenkins/
  2. Read

Expected Results

https://hub.docker.com/r/jenkins/jenkins/ shows the current README.md content

Actual Results

As noted in https://github.com/jenkinsci/docker/pull/2008#issuecomment-3369303460, https://hub.docker.com/r/jenkins/jenkins/ is outdated and currently showing jdk17 as the latest image:

Image

Anything else?

No response

Are you interested in contributing a fix?

Yes

lemeurherve avatar Oct 06 '25 08:10 lemeurherve

Reopening as the credential saved as secret of this repo to use the GHA from #2092 seems invalid: https://github.com/jenkinsci/docker/actions/runs/18280523475/job/52042361616

Image

lemeurherve avatar Oct 06 '25 12:10 lemeurherve

https://github.com/peter-evans/dockerhub-description?tab=readme-ov-file#action-inputs states the following for the password GHA Action input:

(required) Docker Hub password or Personal Access Token with read/write/delete scope.

We have to challenge the need of delete. Because no way we put an automation token for updating a readme with a delete permission 😱

dduportal avatar Oct 06 '25 12:10 dduportal

Unfortunately that's the way this API has always been. We've had to do that for the other repositories, the token is restricted to just these repositories in GitHub.

timja avatar Oct 06 '25 15:10 timja

Unfortunately that's the way this API has always been. We've had to do that for the other repositories, the token is restricted to just these repositories in GitHub.

Yes, but the danger is too high from my point of view. Even if it is also the case on others. I vote for shortening the DockerHub definition and points it to the GitHub readme, so no need to automate anything.

dduportal avatar Oct 06 '25 15:10 dduportal