Hi,
where could I propose to include the “Created” date and the image hash in docker hub webpages?
I do find it highly annoying and misleading if docker hub pages like
https://hub.docker.com/_/rabbitmq/tags
do claim “Last Updated 2 days ago” or “Last pushed 2 days ago”, where the image itself is age old.
E.g.
rabbitmq:4.0-management
says
Last pushed 2 days by [doijanky]
but reality is
docker pull rabbitmq:4.0-management
4.0-management: Pulling from library/rabbitmq
4b3ffd8ccb52: Pull complete
883958f9d92b: Pull complete
f860d4e2d5bc: Pull complete
96aedc9464ed: Pull complete
753f597d0f33: Pull complete
1cd0a4c43107: Pull complete
3b2069fd77a3: Pull complete
2614367bcc3f: Pull complete
e200531438bf: Pull complete
5ebe8ca8bf0e: Pull complete
Digest: sha256:438c232a3a39d091645c5ac2b382c9f46c1ff3f1230587c0f20c5f1f7b6a6c95
Status: Downloaded newer image for rabbitmq:4.0-management
docker image list rabbitmq:4.0-management
REPOSITORY TAG IMAGE ID CREATED SIZE
rabbitmq 4.0-management 5e283cfbf5e6 13 months ago 264MB
docker image inspect rabbitmq:4.0-management
"Created": "2024-09-20T21:15:09Z",
It is absolutely misleading to (just) show when an image has been pushed the last time, but hiding when it was actually built.
This is also a security problem, because it makes it difficult to recognize old images, possible containing security flaws that have been fixed meanwhile.