From 8c99af8950498a495204e463c4860c62a9697d69 Mon Sep 17 00:00:00 2001 From: Amit Paz Date: Fri, 3 Jul 2026 23:02:34 +0300 Subject: [PATCH] docs: fix staleness flagged by the audit pass MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - README.md: correct the "all four services pull pinned images from GHCR" claim — the three AgentKit services pull the mutable :latest tag from GHCR, and lore-db uses pgvector/pgvector:pg16 from Docker Hub. - README.md (Rebuild from Source): clarify that every AgentKit service pulls its :latest image from GHCR by default (not a pinned image). Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01CKkfVA3iY5G3Q43Mg4Xsu2 --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 6e7a1d6..f246940 100644 --- a/README.md +++ b/README.md @@ -31,7 +31,7 @@ cp .env.example .env # then edit .env and set real secrets docker compose up -d ``` -All four services pull pinned images from GHCR (ghcr.io/agentkitai). Secrets are read from +The three AgentKit services pull `:latest` images from GHCR (ghcr.io/agentkitai); the Lore DB uses pgvector/pgvector:pg16 from Docker Hub. Secrets are read from `.env` (gitignored); `docker compose up` will refuse to start until the required keys in `.env` are set. @@ -81,7 +81,7 @@ curl http://localhost:8765/health # Lore ## Rebuild from Source -By default every service pulls a pinned image from GHCR. To build any of +By default every AgentKit service pulls its `:latest` image from GHCR. To build any of them from a local checkout instead, uncomment that service's `build:` lines in `docker-compose.yml` (each expects the sibling repo checked out alongside this one), then: