Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.
This pull request re-pins the Docker base image
atomist/skill:node14
inDockerfile
to the current digest.https://github.com/atomist-skills/npm-vulnerability-scanner-skill/blob/4e7c5cb99580d4f1b77e2f91108f49ccc5d7a46d/Dockerfile#L12-L12
Changelog for
atomist/skill:node14
### Commit New image build caused by commit atomist-skills/skill-base@105fe401f63634e6a749d55e716a097bd0f0e5ed to [`Dockerfile`](https://github.com/atomist-skills/skill-base/blob/105fe401f63634e6a749d55e716a097bd0f0e5ed/Dockerfile): ``` Update Dockerfile ``` --- ### Comparison Comparing Docker image `atomist/skill:node14` at digests _Current_ `sha256:a3916207013fc09f93a2a0207dde84a9e82f3ede620245e4fd1718acbc502cbe` (645mb) and _Proposed_ `sha256:2c98a06ec9cc2504c1d93ea519cbe01f2aae30771c37e7fe8fa92e450b03db98` (646mb): #### Packages The following package differences were detected: | Name | Current | Proposed | Type | | ---- | ------- | -------- | ---- | | `distro-info-data` | `0.46ubuntu4.2` | `0.46ubuntu4.3` | Apt | | `nodejs` | `14.18.0-deb-1nodesource1` | `14.18.1-deb-1nodesource1` | Apt | #### Files The following file modifications were detected: | Name | Current | Proposed | Diff | | ---- | ------- | -------- | ---- | | `/root/.config/configstore/update-notifier-npm.json` | `55b` | `55b` | `0b` | | `/usr/bin/node` | `71mb` | `71mb` | `48b` | | `/usr/include/node/config.gypi` | `19kb` | `19kb` | `0b` | | `/usr/include/node/node_version.h` | `3.7kb` | `3.7kb` | `0b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@google-cloud/common` (8 files changed) | `145kb` | `144kb` | `-1.0kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@google-cloud/projectify/package.json` | `2.6kb` | `2.6kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@google-cloud/promisify/package.json` | `2.7kb` | `2.8kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@google-cloud/pubsub` (2 files changed) | `59kb` | `60kb` | `307b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@google-cloud/storage` (79 files changed) | `363kb` | `3.0mb` | `2.7mb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@graphql-tools/import` (7 files changed) | `385kb` | `384kb` | `-898b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@graphql-tools/relay-operation-optimizer` (4 files changed) | `324kb` | `324kb` | `102b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@graphql-tools/schema` (4 files changed) | `324kb` | `324kb` | `102b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@grpc/grpc-js` (19 files changed) | `137kb` | `176kb` | `39kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@octokit/openapi-types` (2 files changed) | `1.5mb` | `1.5mb` | `2.9kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@octokit/plugin-paginate-rest` (9 files changed) | `156kb` | `157kb` | `1.0kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@octokit/plugin-rest-endpoint-methods` (10 files changed) | `1.1mb` | `1.1mb` | `2.0kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@octokit/types` (6 files changed) | `179kb` | `179kb` | `294b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/@types/node` (11 files changed) | `649kb` | `655kb` | `6.0kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/arrify/package.json` | `2.1kb` | `2.2kb` | `131b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/base64-js/package.json` | `2.3kb` | `2.3kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/browserslist/package.json` | `2.0kb` | `2.0kb` | `-1b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/caniuse-lite/data/features/sharedarraybuffer.js` | `1.2kb` | `1.2kb` | `8b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/caniuse-lite/package.json` | `1.7kb` | `1.7kb` | `0b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/duplexify/package.json` | `1.9kb` | `1.9kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/ecdsa-sig-formatter/package.json` | `2.5kb` | `2.6kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/electron-to-chromium/chromium-versions.js` | `586b` | `601b` | `15b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/electron-to-chromium/full-chromium-versions.js` | `27kb` | `28kb` | `367b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/electron-to-chromium/full-versions.js` | `39kb` | `40kb` | `540b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/electron-to-chromium/package.json` | `2.0kb` | `2.0kb` | `0b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/electron-to-chromium/versions.js` | `1.1kb` | `1.1kb` | `15b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/ent/package.json` | `1.7kb` | `1.7kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/extend/package.json` | `2.3kb` | `2.4kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/fast-text-encoding/package.json` | `1.9kb` | `2.0kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/gaxios/package.json` | `4.0kb` | `4.0kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/gcp-metadata/package.json` | `3.2kb` | `3.2kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/gcs-resumable-upload/node_modules` (2 files changed) | `59kb` | `60kb` | `307b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/google-gax/CHANGELOG.md` | `58kb` | `58kb` | `371b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/google-gax/node_modules` (2 files changed) | `59kb` | `60kb` | `307b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/google-gax/package.json` | `6.1kb` | `6.1kb` | `0b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/graphql-request/README.md` | `13kb` | `13kb` | `257b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/graphql-request/dist` (7 files changed) | `29kb` | `38kb` | `9.3kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/graphql-request/package.json` | `3.1kb` | `3.1kb` | `0b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/gtoken/package.json` | `2.7kb` | `2.8kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/jose/dist` (31 files changed) | `93kb` | `93kb` | `49b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/jose/package.json` | `7.8kb` | `7.8kb` | `24b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/jws/package.json` | `1.9kb` | `1.9kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/lru-cache/package.json` | `2.0kb` | `2.1kb` | `65b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/node-releases/.github` | | `-` | `-2.4kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/node-releases/README.md` | `1.0kb` | `1.0kb` | `1b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/node-releases/data` (4 files changed) | `470kb` | `20kb` | `-450kb` | | `/usr/lib/node_modules/@atomist/skill/node_modules/node-releases/package.json` | `1.6kb` | `1.5kb` | `-121b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/picocolors/README.md` | `765b` | `622b` | `-143b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/picocolors/package.json` | `1.6kb` | `1.6kb` | `34b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/picocolors/picocolors.d.ts` | `137b` | `138b` | `1b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/picocolors/picocolors.js` | `2.6kb` | `2.5kb` | `-50b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/retry-request/package.json` | `1.8kb` | `1.9kb` | `66b` | | `/usr/lib/node_modules/@atomist/skill/node_modules/teeny-request/package.json` | `2.5kb` | `2.6kb` | `66b` | | `/usr/lib/python3.9/__pycache__/_markupbase.cpython-39.pyc` | `7.6kb` | `7.6kb` | `0b` | | `/usr/lib/python3.9/__pycache__/difflib.cpython-39.pyc` | `58kb` | `58kb` | `0b` | | `/usr/lib/python3.9/__pycache__/ftplib.cpython-39.pyc` | `28kb` | `28kb` | `0b` | | `/usr/lib/python3.9/__pycache__/gettext.cpython-39.pyc` | `18kb` | `18kb` | `0b` | | `/usr/lib/python3.9/__pycache__/hashlib.cpython-39.pyc` | `6.5kb` | `6.5kb` | `0b` | | `/usr/lib/python3.9/__pycache__/mailbox.cpython-39.pyc` | `59kb` | `59kb` | `0b` | | `/usr/lib/python3.9/__pycache__/nntplib.cpython-39.pyc` | `31kb` | `31kb` | `0b` | | `/usr/lib/python3.9/__pycache__/pathlib.cpython-39.pyc` | `44kb` | `44kb` | `0b` | | `/usr/lib/python3.9/__pycache__/pydoc.cpython-39.pyc` | `83kb` | `83kb` | `0b` | | `/usr/lib/python3.9/__pycache__/rlcompleter.cpython-39.pyc` | `5.6kb` | `5.6kb` | `0b` | | `/usr/lib/python3.9/__pycache__/socket.cpython-39.pyc` | `28kb` | `28kb` | `0b` | | `/usr/lib/python3.9/__pycache__/tarfile.cpython-39.pyc` | `62kb` | `62kb` | `0b` | | `/usr/lib/python3.9/__pycache__/typing.cpython-39.pyc` | `70kb` | `70kb` | `0b` | | `/usr/lib/python3.9/__pycache__/zipfile.cpython-39.pyc` | `58kb` | `58kb` | `0b` | | `/usr/lib/python3.9/asyncio/__pycache__/__main__.cpython-39.pyc` | `3.1kb` | `3.1kb` | `0b` | | `/usr/lib/python3.9/email/__pycache__/message.cpython-39.pyc` | `37kb` | `37kb` | `0b` | | `/usr/lib/python3.9/http/__pycache__/client.cpython-39.pyc` | `34kb` | `34kb` | `0b` | | `/usr/lib/python3.9/test/__pycache__/test_support.cpython-39.pyc` | `21kb` | `21kb` | `0b` | | `/usr/lib/python3.9/unittest/__pycache__/mock.cpython-39.pyc` | `76kb` | `76kb` | `0b` | | `/usr/lib/python3.9/wsgiref/__pycache__/handlers.cpython-39.pyc` | `16kb` | `16kb` | `0b` | | `/usr/lib/python3.9/wsgiref/__pycache__/util.cpython-39.pyc` | `5.3kb` | `5.3kb` | `0b` | | `/usr/share/distro-info/ubuntu.csv` | `2.3kb` | `2.3kb` | `87b` | | `/usr/share/doc/nodejs/changelog.Debian.gz` | `156b` | `157b` | `1b` | | `/var/cache/ldconfig/aux-cache` | `9.9kb` | `9.9kb` | `0b` | | `/var/lib/dpkg/info/distro-info-data.md5sums` | `366b` | `366b` | `0b` | | `/var/lib/dpkg/info/nodejs.list` | `309kb` | `309kb` | `0b` | | `/var/lib/dpkg/info/nodejs.md5sums` | `335kb` | `335kb` | `0b` | | `/var/lib/dpkg/status` | `235kb` | `235kb` | `0b` | | `/var/lib/dpkg/status-old` | `235kb` | `235kb` | `0b` | | `/var/log/alternatives.log` | `9.1kb` | `9.1kb` | `0b` | | `/var/log/apt/eipp.log.xz` | `11kb` | `11kb` | `0b` | | `/var/log/apt/history.log` | `24kb` | `24kb` | `0b` | | `/var/log/apt/term.log` | `41kb` | `41kb` | `0b` | | `/var/log/dpkg.log` | `226kb` | `226kb` | `0b` | #### History The following differences in [`docker history`](https://docs.docker.com/engine/reference/commandline/history/) were detected: ```diff /bin/sh -c #(nop) ADD file:3a18768000089a105cd4f288985d6249e8aee2c742a055a892a47aab413f25c0 in / /bin/sh -c #(nop) CMD ["bash"] RUN apt-get update && apt-get install -y git=1:2.30.2-1ubuntu1 && apt-get clean -y && rm -rf /var/cache/apt /var/lib/apt/lists/* /tmp/* /var/tmp/* -RUN apt-get update && apt-get install -y build-essential=12.8ubuntu3 curl=7.74.0-1ubuntu2.3 && curl -sL https://deb.nodesource.com/setup_14.x | bash - && apt-get update && apt-get install -y nodejs=14.18.0-deb-1nodesource1 && apt-get remove -y curl && apt-get autoremove -y && apt-get clean -y && rm -rf /var/cache/apt /var/lib/apt/lists/* /tmp/* /var/tmp/* +RUN apt-get update && apt-get install -y build-essential=12.8ubuntu3 curl=7.74.0-1ubuntu2.3 && curl -sL https://deb.nodesource.com/setup_14.x | bash - && apt-get update && apt-get install -y nodejs=14.18.1-deb-1nodesource1 && apt-get remove -y curl && apt-get autoremove -y && apt-get clean -y && rm -rf /var/cache/apt /var/lib/apt/lists/* /tmp/* /var/tmp/* RUN npm install -g @atomist/skill@0.11.0 && rm -rf /root/.npm/ RUN apt-get update && apt-get install -y linux-libc-dev=5.11.0-37.41 libgcrypt20=1.8.7-2ubuntu2.1 libgd3=2.3.0-2ubuntu0.1 && apt-get clean -y && rm -rf /var/cache/apt /var/lib/apt/lists/* /tmp/* /var/tmp/* ``` #### Ports No different exposed ports detected #### Environment Variables No different environment variables detected
Pinning
FROM
lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.File changed:
Dockerfile