Merge pull request #543 from UlisesGascon/fix/pin-dependency

konstruktoid · web-flow · commit 0fd702afedd6 · 2023-11-19T22:04:37.000Z
feat: use SHA instead of tags for base image
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.18
+FROM alpine:3.18@sha256:eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978
 
 LABEL \
   org.label-schema.name="docker-bench-security" \

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM alpine:3.18`
	`1`	`+FROM alpine:3.18@sha256:eece025e432126ce23f223450a0326fbebde39cdf496a85d8c016293fc851978`
`2`	`2`
`3`	`3`	`LABEL \`
`4`	`4`	`org.label-schema.name="docker-bench-security" \`