Switch to hardened python images

[ostefano]

No description provided.

[ostefano]

@arteta22000 mmm, registry requires login.

Not sure whether we want to force all users to do so.

[arteta22000]

@arteta22000 mmm, registry requires login.

Not sure whether we want to force all users to do so.

Ummm, if I understand correctly, the Docker images are hosted on GitHub?
So you only need authentication to the Docker registry (DHI) for the pipelines that build the images, right?
In that case, you can just use a token hub docker in the pipelines to build the images.
All users will continue to use the GitHub Docker registry in the docker compose

[ostefano]

@arteta22000 mmm, registry requires login.
Not sure whether we want to force all users to do so.

Ummm, if I understand correctly, the Docker images are hosted on GitHub? So you only need authentication to the Docker registry (DHI) for the pipelines that build the images, right? In that case, you can just use a token hub docker in the pipelines to build the images. All users will continue to use the GitHub Docker registry in the docker compose

Correct, and documentation for users building the images (for compliance reasons, there are more than some).

Also, see my other concerns detailed here #357 (comment)

[ostefano]

@arteta22000 correction: if we change also valkey and myself, everybody doing docker compose up will need a docker account.