Description
Feature Title
Official Docker Image
Feature Description
Currently everywhere in your project you tell people to build the binary themselves, and thus build the docker image themselves too. It's obvious that this comes from a place of transparency/security, and that's good. However, all major projects SHOULD provide an official Docker image on the docker hub (or another trusted public registry).
1st
Without any docker images, this means every user must build the program all the time. Ecologically, this is a huge waste of resources when there's only need for one person building the image, then making it available online (like for all major open source projects and distribution packages).
2nd
This makes everyone not wanting to build themselves lose time for nothing (if someone doesn't trust your official docker image, I would gladly like to get their answer on if they did vet your whole source code).
3rd
and the most important: Not doing so, you're allowing a lot of unverified images from unknown publishers that many people will pull mistakenly without knowledge of how the full end-to-end software delivery lifecycle. This directly thwarts the original security aspect aforementioned.
4th
This forces every user of the project to needlessly install nodejs and npm on their machine.
Like every professional project, you should provide a docker image and in the documentation tell about both option, the official image and its url, and how to build the project for those that want to do so.
PS: And as a fifth point, this will surely widely increase the visibility of your great project :).
What type of feature are you requesting?
Security / Compliance
Importance
Critical
Additional Context
No response
Code of Conduct
- I agree to follow this project's Code of Conduct
- I have searched the existing issues & discussions to make sure that this is not a duplicate.