Skip to content

ci: registry:2 image unpinned in kind-e2e.yaml — breaks reproducibility #16502

@Ankitsinghsisodya

Description

@Ankitsinghsisodya

Problem

kind-e2e.yaml starts the local Docker registry with:

docker run -d --restart=always \
  ...
  --name $REGISTRY_NAME registry:2

registry:2 resolves to whatever Docker Hub currently has tagged :2, which can change at any time. This breaks build reproducibility and may introduce unvetted upstream changes silently.

Solution

Pin to registry:2.8, the current stable minor release series, so CI behaviour is deterministic across runs.

Affected file

  • .github/workflows/kind-e2e.yaml line 56

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions