Hi All
I'm in the process of setting up SigNoz using Docker Compose and I've pulled the
docker-compose.yaml
from [this link](
https://github.com/SigNoz/signoz/blob/develop/deploy/docker/clickhouse-setup/docker-compose.yaml). However, as I was reviewing the file, I noticed that it references several outdated images, some of which have critical vulnerabilities.
For instance, the image
signoz/locust:1.2.3
is specified, but the latest version available is
signoz/locust:2.24.1
. Could someone shed some light on why these older versions are being used and if there are plans to update them? Alternatively, would it be advisable to simply replace them with the latest versions to ensure security and compatibility?
Here's a list of the outdated images mentioned in the YAML file:
-
signoz/frontend:0.38.2
-
gliderlabs/logspout:v3.2.14
-
signoz/alertmanager:0.23.4
-
signoz/query-service:0.38.2
-
signoz/signoz-otel-collector:0.88.11
-
clickhouse/clickhouse-server:23.11.1-alpine
-
signoz/locust:1.2.3
(mentioned above)
-
bitnami/zookeeper:3.7.1
-
jaegertracing/example-hotrod:1.30
Looking forward to your insights on this.