Closed atomist[bot] closed 2 years ago
Vulnerabilities |
Comparison |
👏 No new critical or high vulnerabilities compared with unstable
🚨 Adds 1 critical severity vulnerability compared with stable
⚡ Also fixes 8 high severity vulnerabilities compared with stable
💡 Rebase branch atomist/pin-docker-base-image/dockerfile
to include latest changes from branch main
to increase accuracy of vulnerability report
More details are available in the vulnerability report
Pull request auto merged:
This pull request re-pins the Docker base image
node:lts
inDockerfile
to the current digest.https://github.com/atomist-skills/docker-build-skill/blob/b87bd6f5ccb76768803a3f4cc0b3efaab430ade1/Dockerfile#L2-L2
Pinning
FROM
lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.File changed:
Dockerfile