Docker Hub Hacked – 190k accounts, GitHub tokens revoked, builds disabled

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by viraptor on Saturday April 27, 2019 @12:41AM (#19763819)

Your own repo, AWS ECR, whatever GCP's version is called, and many others.

[ Parent | on HN ]

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by buzer on Saturday April 27, 2019 @01:22AM (#19763949)

There are actually very few alternatives for the autobuild part. The only alternative that I'm aware of is Quay, others require you to roll out your own build & push process.

[ Parent | on HN ]

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by dawnerd on Saturday April 27, 2019 @02:15AM (#19764102)

I use drone.io self hosted to build all my images. They then get pushed to a self-hosted hub.

[ Parent | on HN ]

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by oszione on Saturday April 27, 2019 @01:59AM (#19764048)

GCP's Cloud Build is also a simple option.

[ Parent | on HN ]

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by viraptor on Saturday April 27, 2019 @01:30AM (#19763964)

It's not that hard to roll your own (I'm doing that). It's not trivial, but if you need autobuild rather than just tags, it's not a huge time investment either. Some systems have all the necessary stuff exposed as plugins too (for example buildkite)

[ Parent | on HN ]

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by techntoke on Saturday April 27, 2019 @02:03AM (#19764073)

Autobuilding is really just a free GitLab pipeline.

[ Parent | on HN ]