Docker Container - getting a secure source for python image

Question

Hi All,

We are doing a POC on publishing docker containers into Azure APP Service.

We have an application written in python for which we created a docker and deployed it into Azure APP Service.

For creating the python image, we used the official python image from the docker hub "https://hub.docker.com/_/python/". Is this a secure source for the python image? Will it have all the latest updates?

I was going through some app services where we have published the python code directly instead of creating a docker container. Does Microsoft also create docker containers in the backend for these codes that we publish?

Any pointers would be really helpful.

Thanks.

Answer 1

Docker Hub is an independent authority to publish docker images. In Docker Hub, you can check an official image's property by reading the article here: https://docs.docker.com/docker-hub/official_images/
You can find a special indication named 'Official Image' near to the package in Docker Hub as an example below: This indicates that the docker image found there has been published by an official authority.

Microsoft is actually not maintaining a docker repository. However, Microsoft also has an official repository in docker hub here: https://hub.docker.com/publishers/microsoftowner

In conclusion, you can get the authenticity of the docker image, periodic updates etc. from docker hub only and Microsoft is not providing the way to have a 'GOOD Image'

----------

If the Answer is helpful, please click "Accept Answer" and upvote it