search

atomist-playground / maventest

0 stars 0 forks source link

Pin Docker base images in Dockerfile #11

Open atomist[bot] opened 2 years ago

atomist[bot] commented 2 years ago

This pull request pins the following Docker base images in Dockerfile to their current digests.

https://github.com/atomist-playground/maventest/blob/d084b69436fcc752367573de5aa5ef7037dcea1c/Dockerfile#L1-L1

Digest sha256:72922abc95d38e02f750b34800239dc0e2c298e74bfdd970018367f0d9281d5c references a multi-CPU architecture image manifest. This image supports the following architectures:

https://github.com/atomist-playground/maventest/blob/d084b69436fcc752367573de5aa5ef7037dcea1c/Dockerfile#L7-L7

Digest sha256:e3168174d367db9928bb70e33b4750457092e61815d577e368f53efb29fea48b references a multi-CPU architecture image manifest. This image supports the following architectures:

Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.

File changed:

atomist[bot] commented 2 years ago
Vulnerabilities
Comparison

🎉 Fixes 10 critical and 21 high severity vulnerabilities compared with target branch main

More details are available in the vulnerability report