DEV Community

Discussion on: Best Security Practices for Docker in 2023

Collapse
 
ahansondev profile image
Alex Hanson

Consider using node:16.17 instead of pulling the specific patch version number. If the image is versioned correctly, you'll always pull the latest version with patch fixes, which is what you generally want.

Many times I'll also just say node:16 (or python:3.10) and let it always pull the latest release for those major versions. I let the unit tests in my CI pipeline catch any breaking changes with the new container patch or minor version updates, just always run a docker pull node:16.17 when you do a dev build.

Collapse
 
nayanpatil1998 profile image
Nayan Patil

Thank you for suggestion.