Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added the creation of Atlantis minimal with the latest TF version #2901

Closed

Conversation

robmonct
Copy link

Added the creation of Atlantis minimal with only the latest TF version in order to avoid as much as possible the vulnerabilities of old TF versions.

what

Remove all Terraform versions except the last one to avoid exposure to old vulnerabilities.

why

The support of very old Terraform versions expose Atlantis docker image to old vulnerabilities which aren't easy to solve.

tests

references

…n in order to avoid as much as possible the vulnerabilities of old TF versions.
@robmonct robmonct requested a review from a team as a code owner December 30, 2022 17:32
@nitrocode
Copy link
Member

Hi @robmonct . Thank you for the contribution.

I do not think we want to add a new docker image at this point. If anything, we'd eventually remove the older versions of terraform from the existing image.

For now, you are welcome, and encouraged, to create and manage your own version of the provided image. Most users, including myself, customize the image to add additional tools, and removing older (or even all) terraform versions also makes sense now that we can download terraform binaries on the fly.

@nitrocode nitrocode added the needs discussion Large change that needs review from community/maintainers label Dec 30, 2022
@jamengual
Copy link
Contributor

jamengual commented Dec 30, 2022

I have to agree, this adds more work to the already small group of maintainers.

as @nitrocode said you can always create your custom image.

@nitrocode nitrocode closed this Dec 30, 2022
@robmonct
Copy link
Author

robmonct commented Jan 2, 2023

No problem. It was just a proposal. Thanks you for the feedback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs discussion Large change that needs review from community/maintainers
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants