Skip to content

Latest commit

 

History

History
59 lines (42 loc) · 3.67 KB

project-roadmap-archive.md

File metadata and controls

59 lines (42 loc) · 3.67 KB
Raw

2021-02-18

2020

We are getting very close to a beta release. The requirements for this release are:

  1. Support for language package managers.
  2. Ability to run on Mac and Windows using Docker.

Our goal is to meet these requirements by the end of the year

  • We will work towards enabling language package managers like pip, npm and gem including support for golang which will be available in future releases slated for this year.
  • We will try to move away from using overlayfs to "debug" container images. This will allow us to move away from using a volume mount to a host linux system to make Tern work on Windows and Mac. However, this will not help towards running Tern in an unprivileged container (at least in the default environment).

We will also continue to work on the following:

  • We will continue to support the SPDX format for container images. To that end, we will make changes to update the format of the document as the spec evolves.
  • We will be working with the Conan project to integrate some of the functionality needed by their use cases.
  • As usual, we will continue to work on our technical debt and bug fixes.

2020-04-15

2019

Since 2018, Tern has joined the Linux Foundation. As a result, many of the project's goals will be aligned with the goals of the ACT project. This basically means some more resources will go towards making the project easier for developers to use while gently motivating them to follow some best practices. We will also be focusing on allowing Tern to better integrate with these and other projects.

For Release 0.4.0 dated May 2019, we will be focusing on the SPDX superbug.

CI/CD for the project became a priority. We can't sustain further community growth without it. So for release 0.5.4 dated August 2019, we focused on these items:

  • Setting up Circle CI to run linting with Prospector
  • Setting up a Build and Release pipeline where PyPI package managers
  • Setting up Circle CI to run tests based on files touched

This was a relatively small release as one of the maintainers was on vacation in July.

For Release 1.0.0 slated for November of 2019, we will focus on the following:

  • Using the stevedore module to dynamically load reporting formats.
  • Some refactoring to allow external tools to be integrated into Tern.
  • Some refactoring to allow containers built using other tools. This includes enabling Tern to use a raw container image tarball.
  • Some refactoring to allow language level package managers. We will focus on pip
  • Bug fixes and technical debt.

2019-02-27

2018

The end goal for 2018 is to make the project relevant to real world containers and to make it easy to contribute to it. Milestones for the project can be discussed on the community slack channel or the public forum. See the contributing guide for information on how to join the conversation.

Release 0.1.0

  • Create isolated environments to operate on without using other dependencies
  • Analyze a container image layer by layer
  • Optimize shell script workload for package managers

Release 0.2.0

  • Work on raw container images along with Dockerfiles
  • Ability to track true base images (FROM scratch in Dockerfiles)
  • Support for images created from multiple imports
  • Support for ADD, COPY and WORKDIR

Release 0.3.0

  • Hardening with a variety of Dockerfiles
  • Support for multistage build Dockerfiles