container-update-advisor容器更新检查

Check running Docker containers for newer image versions and generate a prioritized update report. Fetches release notes and flags breaking changes vs safe updates. Use when asked about container updates, docker updates, outdated containers, update check, what needs updating, are my containers up to date, or any request to review Docker image versions.

作者: admin | 来源: ClawHub

Container Update Advisor

Check all running Docker containers against Docker Hub for newer versions, fetch changelogs, and output a prioritized markdown report with risk flags.

Scripts

All scripts live in scripts/ relative to this file. Run from that directory.

Script	Purpose
INLINECODE1	List running containers + image tags (outputs JSON)
INLINECODE2

Query Docker Hub for newer versions (stdin/file → JSON) |
| fetch_changelog.py | Fetch GitHub release notes for updated images (stdin/file → JSON) |
| format_report.py | Render prioritized markdown report (stdin/file → stdout) |

Full Pipeline

CODEBLOCK0

To save intermediate output for debugging, pass each script's output as a file argument to the next:
CODEBLOCK1

Risk Assessment Logic

- Major version bump → 🔴 review first
Minor version bump → 🔴 review first (may have API changes)
Changelog mentions "breaking" → 🔴 review first
Patch bump only, no breaking keywords → 🟢 safe to update

What Gets Skipped

- Containers using latest tag (no version to compare)
Digest-pinned images (sha256:... tags)
Non-Docker Hub registries (GHCR, ECR, etc.)
Private images (401/403 → skipped gracefully)
Non-semver tags (e.g. alpine, focal, slim)

GitHub Token (Optional)

Set GITHUB_TOKEN env var to increase GitHub API from 60 → 5,000 req/hr:
CODEBLOCK2

Reference

See references/setup-guide.md for scheduling, rate limits, and how image matching works.

容器更新顾问

检查所有正在运行的Docker容器与Docker Hub上的较新版本，获取变更日志，并输出带有风险标记的优先级Markdown报告。

脚本

所有脚本均位于相对于此文件的 scripts/ 目录中。请在该目录下运行。

脚本	用途
scancontainers.py	列出正在运行的容器及镜像标签（输出JSON）
checkupdates.py

完整流水线

bash
python3 scan_containers.py \
| python3 check_updates.py \
| python3 fetch_changelog.py \
| python3 format_report.py

如需保存中间输出以便调试，可将每个脚本的输出作为文件参数传递给下一个脚本：
bash
python3 scan_containers.py > /tmp/c.json
python3 check_updates.py /tmp/c.json > /tmp/u.json
python3 fetch_changelog.py /tmp/u.json > /tmp/ch.json
python3 format_report.py /tmp/ch.json

风险评估逻辑

- 主版本号升级 → 🔴 优先审查
次版本号升级 → 🔴 优先审查（可能包含API变更）
变更日志提及breaking → 🔴 优先审查
仅补丁升级，无破坏性关键词 → 🟢 可安全更新

跳过项

- 使用 latest 标签的容器（无版本可比较）
摘要固定镜像（sha256:... 标签）
非Docker Hub注册表（GHCR、ECR等）
私有镜像（401/403 → 优雅跳过）
非语义化版本标签（例如 alpine、focal、slim）

GitHub令牌（可选）

设置 GITHUB_TOKEN 环境变量可将GitHub API请求限制从60次/小时提升至5,000次/小时：
bash
export GITHUBTOKEN=ghpyourtoken

参考

请参阅 references/setup-guide.md 了解调度、速率限制以及镜像匹配的工作原理。

container-update-advisor容器更新检查