Skip to content

Commit

Permalink
docs: update missed tagging guidelines page (#498)
Browse files Browse the repository at this point in the history
Signed-off-by: Xander Grzywinski <xandergrzyw@gmail.com>
  • Loading branch information
salaxander committed Feb 7, 2024
1 parent 8a9264f commit 59bb1b3
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions website/versioned_docs/version-v0.6.x/best-practices.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ title: Tagging Guidelines

There are some patterns and practices you may want to consider when using Copa to patch images. Remember that these are suggestions that may not fit into your workflow, but we think that staying as close as possible to these practices offers the best experience with Copa.

## Patch from the Base Image
When patching vulnerabilities in an image, it helps to always work from the initial unmodified image. For example, say you have an image tagged `nginx:1.24.0` that contains a vulnerability. You run Copa to patch the image and produce a new image tagged `nginx:1.24.0-1`. Then if another vulnerability shows up in your `nginx:1.24.0-1` image, you should again patch from the unmodified `nginx:1.24.0` image. This will help prevent the buildup of patch layers (ignoring subsequent patch layers is a potential future enhancement).
## Patch from Unmodified image
When patching vulnerabilities in an image, it helps to always work from the initial unmodified image. For example, say you have an image tagged `nginx:1.24.0` that contains a vulnerability. You run Copa to patch the image and produce a new image tagged `nginx:1.24.0-1`. Then if another vulnerability shows up in your `nginx:1.24.0-1` image, you should again patch from the unmodified `nginx:1.24.0` image. This will help prevent the buildup of patch layers ([discarding subsequent patch layers](https://github.com/project-copacetic/copacetic/issues/389) is a potential future enhancement).

## Tagging
There are a couple possible patterns that you could follow when tagging patched images.
Expand Down

0 comments on commit 59bb1b3

Please sign in to comment.