{"action":"created","issue":{"url":"https://api.github.com/repos/docker/machine/issues/448","labels_url":"https://api.github.com/repos/docker/machine/issues/448/labels{/name}","comments_url":"https://api.github.com/repos/docker/machine/issues/448/comments","events_url":"https://api.github.com/repos/docker/machine/issues/448/events","html_url":"https://github.com/docker/machine/issues/448","id":56051531,"number":448,"title":"Stop driver images from being hard coded into the source code.","user":{"login":"sthulb","id":103217,"avatar_url":"https://avatars.githubusercontent.com/u/103217?v=3","gravatar_id":"","url":"https://api.github.com/users/sthulb","html_url":"https://github.com/sthulb","followers_url":"https://api.github.com/users/sthulb/followers","following_url":"https://api.github.com/users/sthulb/following{/other_user}","gists_url":"https://api.github.com/users/sthulb/gists{/gist_id}","starred_url":"https://api.github.com/users/sthulb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sthulb/subscriptions","organizations_url":"https://api.github.com/users/sthulb/orgs","repos_url":"https://api.github.com/users/sthulb/repos","events_url":"https://api.github.com/users/sthulb/events{/privacy}","received_events_url":"https://api.github.com/users/sthulb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-01-30T16:07:52Z","updated_at":"2015-02-03T14:32:22Z","closed_at":null,"body":"Users might unknowingly be using compromised images as a result of hard coded images, I suggest that we have a `images.json` that's stored in the repository or somewhere remotely persistent for lookups.\r\n\r\nThe json file would be cached locally and revalidated either:\r\n\r\n1. Once a day or next open\r\n1. Upon every driver creation.\r\n\r\nIf the user doesn't have internet access, the check will log silently to debug."},"comment":{"url":"https://api.github.com/repos/docker/machine/issues/comments/72659552","html_url":"https://github.com/docker/machine/issues/448#issuecomment-72659552","issue_url":"https://api.github.com/repos/docker/machine/issues/448","id":72659552,"user":{"login":"ehazlett","id":260642,"avatar_url":"https://avatars.githubusercontent.com/u/260642?v=3","gravatar_id":"","url":"https://api.github.com/users/ehazlett","html_url":"https://github.com/ehazlett","followers_url":"https://api.github.com/users/ehazlett/followers","following_url":"https://api.github.com/users/ehazlett/following{/other_user}","gists_url":"https://api.github.com/users/ehazlett/gists{/gist_id}","starred_url":"https://api.github.com/users/ehazlett/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ehazlett/subscriptions","organizations_url":"https://api.github.com/users/ehazlett/orgs","repos_url":"https://api.github.com/users/ehazlett/repos","events_url":"https://api.github.com/users/ehazlett/events{/privacy}","received_events_url":"https://api.github.com/users/ehazlett/received_events","type":"User","site_admin":false},"created_at":"2015-02-03T14:32:22Z","updated_at":"2015-02-03T14:32:22Z","body":"I think another benefit (mentioned from @aanand) was to be able to change which base images are used on each provider without pushing a new release.  I could see this being beneficial."}}