e of release, we have built, in advance, a fixed image of the sidecar privately. At the moment of the public disclosure, we pushed that image manually on Docker hub.</p><p>For any release that isn’t fixing a privately disclosed security vulnerability, this Docker image is usually pushed through our release pipeline job, entirely automatically.</p><p>Our automated release process does not work correctly with the manual interactions required by the vulnerability disclosure embargo: the release pipeline code