atomist-skills / docker-build-skill

Atomist Skill to build and push Docker images
Apache License 2.0
1 stars 0 forks source link

Re-pin Docker base image in Dockerfile #402

Closed atomist[bot] closed 2 years ago

atomist[bot] commented 2 years ago

This pull request re-pins the Docker base image node:lts in Dockerfile to the current digest.

https://github.com/atomist-skills/docker-build-skill/blob/2b2dda5f7950441aa1a06a44c40c04c62c7190e7/Dockerfile#L2-L2

Digest sha256:95d8b780f8263060fcc2cc3358b9179d225961a246558a297e83df43c6a6a8ba references a multi-CPU architecture image manifest. This image supports the following architectures:

Changelog for node:lts

### Commit New image build caused by commit docker-library/official-images@9c7fb313f7e082f51cfc73ac587c797513f8df2e to [`library/node`](https://github.com/docker-library/official-images/blob/9c7fb313f7e082f51cfc73ac587c797513f8df2e/library/node): ``` Node: feat: Node.js 17.8.0 ``` --- ### Comparison Comparing Docker image `node:lts` at digests _Current_ `sha256:68e34cfcd8276ad531b12b3454af5c24cd028752dfccacce4e19efef6f7cdbe0` (823mb) and _Proposed_ `sha256:95d8b780f8263060fcc2cc3358b9179d225961a246558a297e83df43c6a6a8ba` (823mb): #### Packages The following package differences were detected: | Name | Current | Proposed | Type | | ---- | ------- | -------- | ---- | | `base-files` | `10.3 deb10u11` | `10.3 deb10u12` | Apt | | `icu-devtools` | `63.1-6 deb10u2` | `63.1-6 deb10u3` | Apt | | `libc-bin` | `2.28-10` | `2.28-10 deb10u1` | Apt | | `libc-dev-bin` | `2.28-10` | `2.28-10 deb10u1` | Apt | | `libc6` | `2.28-10` | `2.28-10 deb10u1` | Apt | | `libc6-dev` | `2.28-10` | `2.28-10 deb10u1` | Apt | | `libgmp-dev` | `2:6.1.2 dfsg-4` | `2:6.1.2 dfsg-4+deb10u1` | Apt | | `libgmp10` | `2:6.1.2 dfsg-4` | `2:6.1.2 dfsg-4+deb10u1` | Apt | | `libgmpxx4ldbl` | `2:6.1.2 dfsg-4` | `2:6.1.2 dfsg-4+deb10u1` | Apt | | `libicu-dev` | `63.1-6 deb10u2` | `63.1-6 deb10u3` | Apt | | `libicu63` | `63.1-6 deb10u2` | `63.1-6 deb10u3` | Apt | | `libmariadb-dev` | `1:10.3.31-0 deb10u1` | `1:10.3.34-0 deb10u1` | Apt | | `libmariadb-dev-compat` | `1:10.3.31-0 deb10u1` | `1:10.3.34-0 deb10u1` | Apt | | `libmariadb3` | `1:10.3.31-0 deb10u1` | `1:10.3.34-0 deb10u1` | Apt | | `libssl-dev` | `1.1.1d-0 deb10u8` | `1.1.1n-0 deb10u1` | Apt | | `libssl1.1` | `1.1.1d-0 deb10u8` | `1.1.1n-0 deb10u1` | Apt | | `libtiff-dev` | `4.1.0 git191117-2~deb10u3` | `4.1.0 git191117-2~deb10u4` | Apt | | `libtiff5` | `4.1.0 git191117-2~deb10u3` | `4.1.0 git191117-2~deb10u4` | Apt | | `libtiffxx5` | `4.1.0 git191117-2~deb10u3` | `4.1.0 git191117-2~deb10u4` | Apt | | `libxml2` | `2.9.4 dfsg1-7+deb10u2` | `2.9.4 dfsg1-7+deb10u3` | Apt | | `libxml2-dev` | `2.9.4 dfsg1-7+deb10u2` | `2.9.4 dfsg1-7+deb10u3` | Apt | | `linux-libc-dev` | `4.19.232-1` | `4.19.235-1` | Apt | | `mariadb-common` | `1:10.3.31-0 deb10u1` | `1:10.3.34-0 deb10u1` | Apt | | `openssl` | `1.1.1d-0 deb10u8` | `1.1.1n-0 deb10u1` | Apt | | `tzdata` | `2021a-0 deb10u3` | `2021a-0 deb10u4` | Apt | #### Files The following file modifications were detected: | Name | Current | Proposed | Diff | | ---- | ------- | -------- | ---- | | `/etc/apt/sources.list` | `421b` | `421b` | `0b` | | `/etc/debian_version` | `6b` | `6b` | `0b` | | `/etc/machine-id` | | `-` | `-33b` | | `/etc/shadow` | `527b` | `527b` | `0b` | | `/etc/shadow-` | `501b` | `501b` | `0b` | | `/lib/s390x-linux-gnu/ld-2.28.so` | `154kb` | `154kb` | `0b` | | `/lib/s390x-linux-gnu/libBrokenLocale-2.28.so` | `6.1kb` | `6.1kb` | `0b` | | `/lib/s390x-linux-gnu/libSegFault.so` | `14kb` | `14kb` | `0b` | | `/lib/s390x-linux-gnu/libanl-2.28.so` | `14kb` | `14kb` | `0b` | | `/lib/s390x-linux-gnu/libc-2.28.so` | `1.6mb` | `1.6mb` | `0b` | | `/lib/s390x-linux-gnu/libcrypt-2.28.so` | `38kb` | `38kb` | `0b` | | `/lib/s390x-linux-gnu/libdl-2.28.so` | `14kb` | `14kb` | `0b` | | `/lib/s390x-linux-gnu/libm-2.28.so` | `694kb` | `694kb` | `0b` | | `/lib/s390x-linux-gnu/libmemusage.so` | `18kb` | `18kb` | `0b` | | `/lib/s390x-linux-gnu/libnsl-2.28.so` | `95kb` | `95kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_compat-2.28.so` | `35kb` | `35kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_dns-2.28.so` | `26kb` | `26kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_files-2.28.so` | `54kb` | `54kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_hesiod-2.28.so` | `22kb` | `22kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_nis-2.28.so` | `50kb` | `50kb` | `0b` | | `/lib/s390x-linux-gnu/libnss_nisplus-2.28.so` | `58kb` | `58kb` | `0b` | | `/lib/s390x-linux-gnu/libpcprofile.so` | `6.0kb` | `6.0kb` | `0b` | | `/lib/s390x-linux-gnu/libpthread-2.28.so` | `147kb` | `147kb` | `0b` | | `/lib/s390x-linux-gnu/libresolv-2.28.so` | `91kb` | `91kb` | `0b` | | `/lib/s390x-linux-gnu/librt-2.28.so` | `35kb` | `35kb` | `0b` | | `/lib/s390x-linux-gnu/libthread_db-1.0.so` | `39kb` | `39kb` | `0b` | | `/lib/s390x-linux-gnu/libutil-2.28.so` | `14kb` | `14kb` | `0b` | | `/root/.gnupg/pubring.kbx` | `44kb` | `44kb` | `0b` | | `/root/.gnupg/pubring.kbx~` | `34kb` | `34kb` | `0b` | | `/root/.gnupg/random_seed` | `600b` | `600b` | `0b` | | `/root/.gnupg/trustdb.gpg` | `1.2kb` | `1.2kb` | `0b` | | `/root/.npm/_logs` (2 files changed) | `1.4kb` | `1.4kb` | `2b` | | `/sbin/ldconfig` | `661kb` | `661kb` | `0b` | | `/tmp/v8-compile-cache-0/9.4.146.24-node.20/zSoptzSyarn-v1.22.18zSbinzSyarn.js.BLOB` | `2.1mb` | `2.1mb` | `0b` | | `/usr/bin/c_rehash` | `6.2kb` | `6.2kb` | `0b` | | `/usr/bin/catchsegv` | `3.2kb` | `3.2kb` | `8b` | | `/usr/bin/gencat` | `22kb` | `22kb` | `0b` | | `/usr/bin/getconf` | `22kb` | `22kb` | `0b` | | `/usr/bin/getent` | `31kb` | `31kb` | `0b` | | `/usr/bin/iconv` | `59kb` | `59kb` | `0b` | | `/usr/bin/ldd` | `5.2kb` | `5.2kb` | `8b` | | `/usr/bin/locale` | `42kb` | `42kb` | `0b` | | `/usr/bin/localedef` | `284kb` | `284kb` | `0b` | | `/usr/bin/mariadb_config` | `10kb` | `11kb` | `96b` | | `/usr/bin/mtrace` | `6.3kb` | `6.3kb` | `8b` | | `/usr/bin/openssl` | `735kb` | `739kb` | `4.0kb` | | `/usr/bin/pkgdata` | `47kb` | `47kb` | `0b` | | `/usr/bin/pldd` | `14kb` | `14kb` | `0b` | | `/usr/bin/rpcgen` | `87kb` | `87kb` | `0b` | | `/usr/bin/sotruss` | `4.2kb` | `4.2kb` | `8b` | | `/usr/bin/sprof` | `27kb` | `27kb` | `0b` | | `/usr/bin/tzselect` | `15kb` | `15kb` | `8b` | | `/usr/bin/zdump` | `18kb` | `18kb` | `0b` | | `/usr/include/elf.h` | `168kb` | `168kb` | `223b` | | `/usr/include/linux` (2 files changed) | `36kb` | `36kb` | `328b` | | `/usr/include/mariadb` (37 files changed) | `1.8mb` | `1.8mb` | `4.9kb` | | `/usr/include/openssl` (27 files changed) | `854kb` | `858kb` | `3.7kb` | | `/usr/include/s390x-linux-gnu` (2 files changed) | `86kb` | `86kb` | `162b` | | `/usr/lib/python3.7` (10 files changed) | `310kb` | `310kb` | `0b` | | `/usr/lib/s390x-linux-gnu` (282 files changed) | `34mb` | `34mb` | `36kb` | | `/usr/lib/ssl/misc/tsget.pl` | `6.4kb` | `6.4kb` | `0b` | | `/usr/local/share/fonts/.uuid` | `36b` | `36b` | `0b` | | `/usr/sbin/iconvconfig` | `26kb` | `26kb` | `0b` | | `/usr/sbin/zic` | `50kb` | `50kb` | `0b` | | `/usr/share/doc` (33 files changed) | `2.4mb` | `2.4mb` | `21kb` | | `/usr/share/fonts` (3 files changed) | `108b` | `108b` | `0b` | | `/usr/share/man` (70 files changed) | `328kb` | `335kb` | `6.7kb` | | `/usr/share/zoneinfo` (4 files changed) | `11kb` | `11kb` | `4b` | | `/var/cache/fontconfig` (8 files changed) | `16kb` | `16kb` | `0b` | | `/var/cache/ldconfig/aux-cache` | `15kb` | `15kb` | `0b` | | `/var/lib/dpkg` (36 files changed) | `1.3mb` | `1.3mb` | `-203b` | | `/var/log/alternatives.log` | `12kb` | `12kb` | `0b` | | `/var/log/apt` (3 files changed) | `115kb` | `115kb` | `184b` | | `/var/log/dpkg.log` | `156kb` | `156kb` | `352b` | #### History The following differences in [`docker history`](https://docs.docker.com/engine/reference/commandline/history/) were detected: ```diff -/bin/sh -c #(nop) ADD file:6505b8e134084dbb9f879838b24cf47cd265cfdc5952f50ba2ddc63ff4553145 in / +/bin/sh -c #(nop) ADD file:784894d175880656ac82b485076fb224bde46d379dd634720acf7acd5eee9365 in / /bin/sh -c #(nop) CMD ["bash"] /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl netbase wget ; rm -rf /var/lib/apt/lists/* /bin/sh -c set -ex; if ! command -v gpg > /dev/null; then apt-get update; apt-get install -y --no-install-recommends gnupg dirmngr ; rm -rf /var/lib/apt/lists/*; fi ``` #### Ports No different exposed ports detected #### Environment Variables No different environment variables detected


Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.


File changed:

atomist[bot] commented 2 years ago

Pull request auto merged: