1.135.1
Changelog
a473330 feat(agent): add hoophq/hoopagent image with minimal and distroless flavours- #1693
A slim agent image shipping the hoop binary and nothing else, in two flavours:
:-minimal Ubuntu 24.04 LTS (~96 MiB, keeps a shell)
:-distroless distroless static (~65 MiB, no shell)
Both run as uid 10001 and serve every connection type the agent handles
in-process. Custom/command-line connections and RDP are not supported; those
use hoophq/hoopdev, which is unaffected.
hoophq/hoopagent is clean-only: neither flavour derives from hoophq/agent-tools
and its SSPL-licensed MongoDB shell, so no AGPL/SSPL appears anywhere in the
repository's history. No unsuffixed tag, no :latest.
Security:
minimal reports 15 findings (0 critical/high, none fixable upstream, all
inherited from the Ubuntu base); distroless reports 1. hoophq/hoopdev
reports over 3000.
bump kin-openapi v0.135.0 -> v0.144.0, clearing GHSA-r277-6w6q-xmqw
(critical, fail-open auth bypass) and GHSA-jpcw-4wr7-c3vq. Neither was
reachable — both are in openapi3filter, which this repo never imports — and
govulncheck misses them entirely. The v2->v3 spec conversion is
byte-identical before and after.
Assets
- hoop-darwin-arm64
- hoop-darwin-amd64
- hoop-linux-arm64
- hoop-linux-amd64
- hoop-windows-arm64
- hoop-windows-amd64
- checksums.txt