Move to dhi.io base images

[mathieu-benoit]

Move to dhi.io base images

• Dockerfile
• Dependabot
• CI
• Release

[github-actions]

Overview

Image reference	score-radius:latest	score-radius:latest
- digest	87c982f5d017	98d71fda9720
- tag	latest	latest
- provenance	0f79f96	605db7d
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	5.3 MB	5.0 MB (-364 kB)
- packages	39	39

Labels (13 changes)

• + 13 added

+com.docker.dhi.chain-id=sha256:457573c05498f72e5dc7704871cb3dda076a159691f3e1a1d8f74eaacda320e5
+com.docker.dhi.compliance=cis
+com.docker.dhi.created=2026-01-26T19:29:02Z
+com.docker.dhi.definition=image/static/alpine-3.23/static
+com.docker.dhi.distro=alpine-3.23
+com.docker.dhi.flavor=
+com.docker.dhi.name=dhi/static
+com.docker.dhi.package-manager=
+com.docker.dhi.shell=
+com.docker.dhi.title=Static (Alpine)
+com.docker.dhi.url=https://dhi.io/catalog/static
+com.docker.dhi.variant=runtime
+com.docker.dhi.version=20251003-alpine3.23

Policies (1 improved, 0 worsened)

Policy Name	score-radius:latest	score-radius:latest	Change	Standing
Default non-root user	✅	✅		No Change
No AGPL v3 licenses	✅	✅		No Change
No fixable critical or high vulnerabilities	✅	✅		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	✅	✅		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change
Valid Docker Hardened Image (DHI) or DHI base image	⚠️ 2	⚠️ 1	-1	Improved

Packages and Vulnerabilities (9 package changes and 0 vulnerability changes)

• ➕ 4 packages added
• ➖ 4 packages removed
• ♾️ 1 packages changed
• 34 packages unchanged

Changes for packages of type apk (3 changes)

	Package	Version score-radius:latest	Version score-radius:latest
➕	alpine-baselayout-data		3.7.1-r8
➕	ca-certificates-bundle		20251003-r0
➕	tzdata		2025c-r0

Changes for packages of type deb (4 changes)

	Package	Version score-radius:latest	Version score-radius:latest
➖	base-files	13.8+deb13u3
➖	media-types	13.0.0
➖	netbase	6.5
➖	tzdata	2025b-4+deb13u1

Changes for packages of type docker (1 changes)

	Package	Version score-radius:latest	Version score-radius:latest
➕	static		20251003-alpine3.23

Changes for packages of type golang (1 changes)

	Package	Version score-radius:latest	Version score-radius:latest
♾️	github.com/score-spec/score-radius	UNKNOWN	0.0.6-0.20260207201035-605db7ddd3f5+dirty