{"action":"created","issue":{"url":"https://api.github.com/repos/glitch-soc/mastodon/issues/536","repository_url":"https://api.github.com/repos/glitch-soc/mastodon","labels_url":"https://api.github.com/repos/glitch-soc/mastodon/issues/536/labels{/name}","comments_url":"https://api.github.com/repos/glitch-soc/mastodon/issues/536/comments","events_url":"https://api.github.com/repos/glitch-soc/mastodon/issues/536/events","html_url":"https://github.com/glitch-soc/mastodon/issues/536","id":330470453,"node_id":"MDU6SXNzdWUzMzA0NzA0NTM=","number":536,"title":"Prebuilt Docker images (CI?)","user":{"login":"Pneumaticat","id":11365056,"node_id":"MDQ6VXNlcjExMzY1MDU2","avatar_url":"https://avatars1.githubusercontent.com/u/11365056?v=4","gravatar_id":"","url":"https://api.github.com/users/Pneumaticat","html_url":"https://github.com/Pneumaticat","followers_url":"https://api.github.com/users/Pneumaticat/followers","following_url":"https://api.github.com/users/Pneumaticat/following{/other_user}","gists_url":"https://api.github.com/users/Pneumaticat/gists{/gist_id}","starred_url":"https://api.github.com/users/Pneumaticat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Pneumaticat/subscriptions","organizations_url":"https://api.github.com/users/Pneumaticat/orgs","repos_url":"https://api.github.com/users/Pneumaticat/repos","events_url":"https://api.github.com/users/Pneumaticat/events{/privacy}","received_events_url":"https://api.github.com/users/Pneumaticat/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-06-07T23:30:46Z","updated_at":"2018-06-10T18:03:31Z","closed_at":null,"author_association":"NONE","body":"Hi! glitch-soc is pretty cool but maybe it'd be cooler to use with prebuilt Docker images xd\r\n\r\n(As I run Mastodon on Kubernetes, having prebuilt images is kind of important for me. I could set up an auto-builder to build them myself if necessary though.)\r\n\r\n* * * *\r\n\r\n- [x] I searched or browsed the repo’s other issues to ensure this is not a duplicate.\r\n"},"comment":{"url":"https://api.github.com/repos/glitch-soc/mastodon/issues/comments/396068921","html_url":"https://github.com/glitch-soc/mastodon/issues/536#issuecomment-396068921","issue_url":"https://api.github.com/repos/glitch-soc/mastodon/issues/536","id":396068921,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NjA2ODkyMQ==","user":{"login":"yipdw","id":3859,"node_id":"MDQ6VXNlcjM4NTk=","avatar_url":"https://avatars3.githubusercontent.com/u/3859?v=4","gravatar_id":"","url":"https://api.github.com/users/yipdw","html_url":"https://github.com/yipdw","followers_url":"https://api.github.com/users/yipdw/followers","following_url":"https://api.github.com/users/yipdw/following{/other_user}","gists_url":"https://api.github.com/users/yipdw/gists{/gist_id}","starred_url":"https://api.github.com/users/yipdw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yipdw/subscriptions","organizations_url":"https://api.github.com/users/yipdw/orgs","repos_url":"https://api.github.com/users/yipdw/repos","events_url":"https://api.github.com/users/yipdw/events{/privacy}","received_events_url":"https://api.github.com/users/yipdw/received_events","type":"User","site_admin":false},"created_at":"2018-06-10T18:03:31Z","updated_at":"2018-06-10T18:03:31Z","author_association":"MEMBER","body":"Well, there was e.g. a version of Mastodon that baked the process environment into `stats.json` during asset compilation.  (Oops.)  However, using placeholder values during asset compilation would have reduced the impact of that vulnerability.\r\n\r\nIf image building and precompilation both use placeholders, and the only time real data and those images meet is in your Kubernetes environment, then:\r\n\r\n1. anything involved in image or asset-building will never see those real data\r\n2. neither the image nor the built assets can contain those real data\r\n\r\nSo I think it's okay."}}
{"actor":{"display_login":"yipdw"}}