{"id":28606196,"url":"https://github.com/endava/docker-php","last_synced_at":"2025-10-04T12:12:34.510Z","repository":{"id":66973401,"uuid":"583329420","full_name":"Endava/docker-php","owner":"Endava","description":"This is a docker php (fpm+apache2+nginx unit) image, based on the official alpine/ubuntu packages for php.  ","archived":false,"fork":false,"pushed_at":"2025-04-30T12:49:06.000Z","size":796,"stargazers_count":17,"open_issues_count":7,"forks_count":5,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-07-22T02:54:27.698Z","etag":null,"topics":["alpine","amd64","apache2","arm64","docker","frankenphp","nginx-unit","php","php-fpm","ubuntu","zts"],"latest_commit_sha":null,"homepage":"https://hub.docker.com/r/endava/php","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Endava.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-12-29T13:02:38.000Z","updated_at":"2025-05-19T11:22:28.000Z","dependencies_parsed_at":"2023-11-13T18:44:38.812Z","dependency_job_id":"2f5b606b-5f2c-43d1-b6c0-03256e2f9b6b","html_url":"https://github.com/Endava/docker-php","commit_stats":null,"previous_names":[],"tags_count":115,"template":false,"template_full_name":null,"purl":"pkg:github/Endava/docker-php","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Endava%2Fdocker-php","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Endava%2Fdocker-php/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Endava%2Fdocker-php/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Endava%2Fdocker-php/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Endava","download_url":"https://codeload.github.com/Endava/docker-php/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Endava%2Fdocker-php/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278309668,"owners_count":25965864,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-04T02:00:05.491Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["alpine","amd64","apache2","arm64","docker","frankenphp","nginx-unit","php","php-fpm","ubuntu","zts"],"created_at":"2025-06-11T19:39:37.047Z","updated_at":"2025-10-04T12:12:34.460Z","avatar_url":"https://github.com/Endava.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# endava/docker-php\n\nThis is a docker php image is based on an alpine (and ubuntu) distribution including some tools and php extensions. You can find more details at the respective release pages on github.\n\n# Supported Versions\n\n| Version | Branch | Latest Release | Status | Vulnerability Report | Fitness Functions |\n| --- | --- | --- | --- | --- | --- |\n| **8.4** | [release/8.4](https://github.com/endava/docker-php/tree/release/8.4) | [![Size][size_84_badge]][release_84_link] | [![Build Status][github_actions_84_badge]][github_actions_84_link] | [![Security Report][security_report_84_badge]][security_report_84_link] | [![php 8.4 Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4.yml)\n| **8.3** | [release/8.3](https://github.com/endava/docker-php/tree/release/8.3) | [![Size][size_83_badge]][release_83_link] | [![Build Status][github_actions_83_badge]][github_actions_83_link] | [![Security Report][security_report_83_badge]][security_report_83_link] | [![php 8.3 Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3.yml)\n| **8.2** | [release/8.2](https://github.com/endava/docker-php/tree/release/8.2) | [![Size][size_82_badge]][release_82_link] | [![Build Status][github_actions_82_badge]][github_actions_82_link] | [![Security Report][security_report_82_badge]][security_report_82_link] | [![php 8.2 Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2.yml)\n| **8.1** | [release/8.1](https://github.com/endava/docker-php/tree/release/8.1) | [![Size][size_81_badge]][release_81_link] | [![Build Status][github_actions_81_badge]][github_actions_81_link] | [![Security Report][security_report_81_badge]][security_report_81_link] | [![php 8.1 Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.1.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.1.yml)\n\n[github_actions_84_badge]: https://github.com/Endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release%2F8.4\n[github_actions_84_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.4\n[release_84_link]: https://github.com/endava/docker-php/releases/tag/8.4.5\n[security_report_84_badge]: https://github.com/endava/docker-php/releases/download/8.4.5/vulnerability-status.png\n[security_report_84_link]: https://github.com/endava/docker-php/releases/download/8.4.5/vulnerability-report.html\n[size_84_badge]: https://github.com/endava/docker-php/releases/download/8.4.5/size-status.png\n\n[github_actions_83_badge]: https://github.com/Endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release%2F8.3\n[github_actions_83_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.3\n[release_83_link]: https://github.com/endava/docker-php/releases/tag/8.3.18\n[security_report_83_badge]: https://github.com/endava/docker-php/releases/download/8.3.18/vulnerability-status.png\n[security_report_83_link]: https://github.com/endava/docker-php/releases/download/8.3.18/vulnerability-report.html\n[size_83_badge]: https://github.com/endava/docker-php/releases/download/8.3.18/size-status.png\n\n[github_actions_82_badge]: https://github.com/Endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release%2F8.2\n[github_actions_82_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.2\n[release_82_link]: https://github.com/endava/docker-php/releases/tag/8.2.28\n[security_report_82_badge]: https://github.com/endava/docker-php/releases/download/8.2.28/vulnerability-status.png\n[security_report_82_link]: https://github.com/endava/docker-php/releases/download/8.2.28/vulnerability-report.html\n[size_82_badge]: https://github.com/endava/docker-php/releases/download/8.2.28/size-status.png\n\n[github_actions_81_badge]: https://github.com/Endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release%2F8.1\n[github_actions_81_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.1\n[release_81_link]: https://github.com/endava/docker-php/releases/tag/8.1.32\n[security_report_81_badge]: https://github.com/endava/docker-php/releases/download/8.1.32/vulnerability-status.png\n[security_report_81_link]: https://github.com/endava/docker-php/releases/download/8.1.32/vulnerability-report.html\n[size_81_badge]: https://github.com/endava/docker-php/releases/download/8.1.32/size-status.png\n\n\n# Experimental Versions\n\n\n| Version | Branch | Latest Release | Status | Vulnerability Report | Fitness Functions |\n| --- | --- | --- | --- | --- | --- |\n| \u003csup\u003e**8.4 (ZTS)**\u003c/sup\u003e | \u003csup\u003e[release/8.4-zts](https://github.com/endava/docker-php/tree/release/8.4-zts)\u003c/sup\u003e | [![Size][size_84zts_badge]][release_84zts_link] | [![Build Status][github_actions_84zts_badge]][github_actions_84zts_link] | [![Security Report][security_report_84zts_badge]][security_report_84zts_link] | [![php 8.4-zts Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4-zts.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4-zts.yml)\n| \u003csup\u003e**8.3 (ZTS)**\u003c/sup\u003e | \u003csup\u003e[release/8.3-zts](https://github.com/endava/docker-php/tree/release/8.3-zts)\u003c/sup\u003e | [![Size][size_83zts_badge]][release_83zts_link] | [![Build Status][github_actions_83zts_badge]][github_actions_83zts_link] | [![Security Report][security_report_83zts_badge]][security_report_83zts_link] | [![php 8.3-zts Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3-zts.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3-zts.yml)\n| \u003csup\u003e**8.2 (ZTS)**\u003c/sup\u003e | \u003csup\u003e[release/8.2-zts](https://github.com/endava/docker-php/tree/release/8.2-zts)\u003c/sup\u003e | [![Size][size_82zts_badge]][release_82zts_link] | [![Build Status][github_actions_82zts_badge]][github_actions_82zts_link] | [![Security Report][security_report_82zts_badge]][security_report_82zts_link] | [![php 8.2-zts Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2-zts.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2-zts.yml)\n| \u003csup\u003e**8.4 (Ubuntu)**\u003c/sup\u003e | \u003csup\u003e[release/8.4-ubuntu](https://github.com/endava/docker-php/tree/release/8.4-ubuntu)\u003c/sup\u003e | [![Size][size_84ubuntu_badge]][release_84ubuntu_link] | [![Build Status][github_actions_84ubuntu_badge]][github_actions_84ubuntu_link] | [![Security Report][security_report_84ubuntu_badge]][security_report_84ubuntu_link] | [![php 8.4-ubuntu Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4-ubuntu.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.4-ubuntu.yml)\n| \u003csup\u003e**8.3 (Ubuntu)**\u003c/sup\u003e | \u003csup\u003e[release/8.3-ubuntu](https://github.com/endava/docker-php/tree/release/8.3-ubuntu)\u003c/sup\u003e | [![Size][size_83ubuntu_badge]][release_83ubuntu_link] | [![Build Status][github_actions_83ubuntu_badge]][github_actions_83ubuntu_link] | [![Security Report][security_report_83ubuntu_badge]][security_report_83ubuntu_link] | [![php 8.3-ubuntu Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3-ubuntu.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.3-ubuntu.yml)\n| \u003csup\u003e**8.2 (Ubuntu)**\u003c/sup\u003e | \u003csup\u003e[release/8.2-ubuntu](https://github.com/endava/docker-php/tree/release/8.2-ubuntu)\u003c/sup\u003e | [![Size][size_82ubuntu_badge]][release_82ubuntu_link] | [![Build Status][github_actions_82ubuntu_badge]][github_actions_82ubuntu_link] | [![Security Report][security_report_82ubuntu_badge]][security_report_82ubuntu_link] | [![php 8.2-ubuntu Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2-ubuntu.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.2-ubuntu.yml)\n| \u003csup\u003e**8.1 (Ubuntu)**\u003c/sup\u003e | \u003csup\u003e[release/8.1-ubuntu](https://github.com/endava/docker-php/tree/release/8.1-ubuntu)\u003c/sup\u003e | [![Size][size_81ubuntu_badge]][release_81ubuntu_link] | [![Build Status][github_actions_81ubuntu_badge]][github_actions_81ubuntu_link] | [![Security Report][security_report_81ubuntu_badge]][security_report_81ubuntu_link] | [![php 8.1-ubuntu Fitness Functions](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.1-ubuntu.yml/badge.svg)](https://github.com/Endava/docker-php/actions/workflows/fitness-functions-release-8.1-ubuntu.yml)\n\n[github_actions_81ubuntu_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.1-ubuntu\n[github_actions_81ubuntu_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.1-ubuntu\n[release_81ubuntu_link]: https://github.com/endava/docker-php/releases/tag/8.1.31-ubuntu\n[security_report_81ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.1.31-ubuntu/vulnerability-status.png\n[security_report_81ubuntu_link]: https://github.com/endava/docker-php/releases/download/8.1.31-ubuntu/vulnerability-report.html\n[size_81ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.1.31-ubuntu/size-status.png\n\n[github_actions_82ubuntu_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.2-ubuntu\n[github_actions_82ubuntu_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.2-ubuntu\n[release_82ubuntu_link]: https://github.com/endava/docker-php/releases/tag/8.2.27-ubuntu\n[security_report_82ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.2.27-ubuntu/vulnerability-status.png\n[security_report_82ubuntu_link]: https://github.com/endava/docker-php/releases/download/8.2.27-ubuntu/vulnerability-report.html\n[size_82ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.2.27-ubuntu/size-status.png\n\n[github_actions_83ubuntu_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.3-ubuntu\n[github_actions_83ubuntu_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.3-ubuntu\n[release_83ubuntu_link]: https://github.com/endava/docker-php/releases/tag/8.3.17-ubuntu\n[security_report_83ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.3.17-ubuntu/vulnerability-status.png\n[security_report_83ubuntu_link]: https://github.com/endava/docker-php/releases/download/8.3.17-ubuntu/vulnerability-report.html\n[size_83ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.3.17-ubuntu/size-status.png\n\n[github_actions_84ubuntu_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.4-ubuntu\n[github_actions_84ubuntu_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.4-ubuntu\n[release_84ubuntu_link]: https://github.com/endava/docker-php/releases/tag/8.4.4-ubuntu\n[security_report_84ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.4.4-ubuntu/vulnerability-status.png\n[security_report_84ubuntu_link]: https://github.com/endava/docker-php/releases/download/8.4.4-ubuntu/vulnerability-report.html\n[size_84ubuntu_badge]: https://github.com/endava/docker-php/releases/download/8.4.4-ubuntu/size-status.png\n\n[github_actions_82zts_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.2-zts\n[github_actions_82zts_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.2-zts\n[release_82zts_link]: https://github.com/endava/docker-php/releases/tag/8.2.27-zts\n[security_report_82zts_badge]: https://github.com/endava/docker-php/releases/download/8.2.27-zts/vulnerability-status.png\n[security_report_82zts_link]: https://github.com/endava/docker-php/releases/download/8.2.27-zts/vulnerability-report.html\n[size_82zts_badge]: https://github.com/endava/docker-php/releases/download/8.2.27-zts/size-status.png\n\n[github_actions_83zts_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.3-zts\n[github_actions_83zts_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.3-zts\n[release_83zts_link]: https://github.com/endava/docker-php/releases/tag/8.3.17-zts\n[security_report_83zts_badge]: https://github.com/endava/docker-php/releases/download/8.3.17-zts/vulnerability-status.png\n[security_report_83zts_link]: https://github.com/endava/docker-php/releases/download/8.3.17-zts/vulnerability-report.html\n[size_83zts_badge]: https://github.com/endava/docker-php/releases/download/8.3.17-zts/size-status.png\n\n[github_actions_84zts_badge]: https://github.com/endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release/8.4-zts\n[github_actions_84zts_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.4-zts\n[release_84zts_link]: https://github.com/endava/docker-php/releases/tag/8.4.4-zts\n[security_report_84zts_badge]: https://github.com/endava/docker-php/releases/download/8.4.4-zts/vulnerability-status.png\n[security_report_84zts_link]: https://github.com/endava/docker-php/releases/download/8.4.4-zts/vulnerability-report.html\n[size_84zts_badge]: https://github.com/endava/docker-php/releases/download/8.4.4-zts/size-status.png\n\n# Unsupported Versions\n\nUnsupported as of php's eol list at https://www.php.net/eol.php\n\n| Version | Branch | Latest Release | Status | Vulnerability Report |\n| --- | --- | --- | --- | --- |\n| **8.0** | [release/8.0](https://github.com/endava/docker-php/tree/release/8.0) | [![Size][size_80_badge]](https://github.com/endava/docker-php/releases/tag/8.0.30) | [![Build Status][github_actions_80_badge]][github_actions_80_link] | [![Security Report][security_report_80_badge]][security_report_80_link]\n\n[github_actions_80_badge]: https://github.com/Endava/docker-php/actions/workflows/ci.yml/badge.svg?branch=release%2F8.0\n[github_actions_80_link]: https://github.com/endava/docker-php/actions?query=branch%3Arelease%2F8.0\n[security_report_80_badge]: https://github.com/endava/docker-php/releases/download/8.0.30/vulnerability-status.png\n[security_report_80_link]: https://github.com/endava/docker-php/releases/download/8.0.30/vulnerability-report.html\n[size_80_badge]: https://github.com/endava/docker-php/releases/download/8.0.30/size-status.png\n\n# Overview\n\nThis is the successor of the deprecated [exozet/php-fpm](https://hub.docker.com/r/exozet/php-fpm/) docker image. We collected ideas on how a new (including breaking changes) version of our heavily used php-fpm image could look like.\n\nWe figured that our old approach had some disadvantages (it was a php-fpm build based on [official docker php images](https://hub.docker.com/_/php)):\n\n* it is based on a source build from php, so we could not use any packages from alpine/debian to speed up the build time\n* there are differences between the php package on debian/alpine \n* there is no official alpine apache2 build\n* we cannot add nginx unit to alpine build, as it lacks php embed SAPI [comment on php!1355](https://github.com/docker-library/php/pull/1355#issuecomment-1352087633)\n* the non-alpine image has lots of (fixable) CVEs, we cannot fix (e.g. trivy image --ignore-unfixed php:8.1.13-fpm-buster says: Total: 23)\n* depends on what the docker library team thinks fits into a docker image for php, it is not the php team releasing it\n\nThe new approach has some advantages:\n\n* It uses the latest package distributed by alpine team/community (which is pretty fast when it comes to security updates - 1 or 2 days after release) and official ubuntu packages\n* The precompiled packages (e.g. xdebug) are very fast installed\n* No need for custom scripts like [docker-php-ext-install](https://github.com/docker-library/php/blob/master/docker-php-ext-install)\n* It ships with httpd binary (for apache2), unitd binary (for nginx unit) and php-fpm binary (for php fpm) to execute php web requests\n* For apache2 and nginx unit variants an external webserver (like nginx) is not necessary anymore \n* It ships linux/arm64/v8 and linux/amd64 version of the image\n* The web server and the web requests are executed as non-privileged user www-data\n* The github release notes (including tool versions and php extension versions) is automatically generated if a commit is tagged\n* The release is available only as endava/php:8.1.16 (no suffix for -root, -xdebug -alpine or -sudo or others)\n* The CI/CD pipeline includes tests to validate the image as nginx unit or apache2 delivery\n* The CI/CD pipeline only builds the latest version (if necessary we can git checkout -b 8.1.13 if you really want to fix something in a release)\n\nThe new approach has a disadvantage:\n\n* We depend on the release of php packages at alpine and ubuntu (e.g. on 2023/01/03 the php82 was not officially packaged on alpine including nginx unit - so we cannot support it. at the same time it is available as docker image on official docker php). If the packaged package version number is not available on alpine anymore - we cannot recreate the docker image (we have a workaround to build older apk's for it - takes more time, but is 100% viable solution!)\n\n\n\n# Contributing\nPlease refer to [CONTRIBUTING.md](CONTRIBUTING.md). \n\n# License\nPlease refer to [LICENSE](LICENSE). \n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fendava%2Fdocker-php","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fendava%2Fdocker-php","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fendava%2Fdocker-php/lists"}