FULLSTACKS Bitnami Impact Assessment

Table of Contents
What is Changing?
Bitnami is changing the way container images are published and used: Instead of managing dozens of immutable, version-specific Docker tags in the public Bitnami registry, all these tags will be moved to a read-only “Legacy” namespace and frozen there.
Potential Impact
Immediate Recommended Actions
This must be completed by August 28!
- 1
Cluster Inventory
Check if you are using Bitnami images in your clusters. These could also originate from Helm charts that use Bitnami charts as dependencies. Therefore, check every image running in your clusters!
- 2
Mirror and Pin Critical Images
Before August 28, pull your essential versioned tags into a private registry and then update your Helm charts to use the pinned images from your registry.
How We Can Help You
- 1
Bitnami Impact Check
We offer a concise assessment to determine if and how this Docker tag change affects your environment. The goal is to provide an overview of whether immediate action is required, where it applies, and how severe the critical impacts might be.
- 2
Supply Chain Future-Proofing Workshop
We will introduce best practices to future-proof your container supply chain and enable you to use certified, versioned, and secured enterprise-grade images from SUSE, RedHat, and other providers – ensuring you remain resilient even in the face of unexpected changes to upstream policies.
Architectural Blueprint & Best Practices
- Let us define a secure, reproducible CI/CD pipeline using OCI-compliant registries and CNCF-supported tools.
- We will review the recommended best practices for SBOM generation, image signing (Cosign), vulnerability scanning, image signature validation, and policy enforcement.
- Ensure version pinning and enable rollback procedures to guarantee deterministic deployments and auditable compliance.
- We will review your activities in the container image supply chain and provide you with best practices for image management and implementation guidelines.
Interested in an individual assessment or a Custom Migration Plan?
Interested?
We secure your container supply chain – before August 28, 2025!




