Digest sha256:bdcdc627284297b040e2acc0bc9b27fa6578539d6e057925889690a7a9996fdf references a multi-CPU architecture image manifest. This image supports the following architectures:
Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.
This pull request re-pins the Docker base image
node:lts
inDockerfile
to the current digest.https://github.com/atomist-skills/npm-vulnerability-scanner-skill/blob/e45fc0f45a2b6cb28ddd23e4c8aae28cf3ae883f/Dockerfile#L2-L2
Digest
sha256:bdcdc627284297b040e2acc0bc9b27fa6578539d6e057925889690a7a9996fdf
references a multi-CPU architecture image manifest. This image supports the following architectures:sha256:7c49a64aba86dd483aa874bc0230c07f282e20741a7c66e426970ecafc149a38
linux/amd64
sha256:52465477dc4877f687480814cc0823dcc9c8af5ea46e9afb74af13de99329e1d
linux/s390x
Changelog for
node:lts
### Commit New image build caused by commit docker-library/official-images@f4ddb572c7a1677d6ad9f11212dc0de5727f687d to [`library/node`](https://github.com/docker-library/official-images/blob/f4ddb572c7a1677d6ad9f11212dc0de5727f687d/library/node): ``` Node: feat: Node.js 17.4.0 ``` --- ### Comparison Comparing Docker image `node:lts` at digests _Current_ `sha256:d3d1a02bab20f7956676ff17e901f7c5054114a902a152cbebdf60cda362584f` (864mb) and _Proposed_ `sha256:bdcdc627284297b040e2acc0bc9b27fa6578539d6e057925889690a7a9996fdf` (864mb): #### Packages The following package differences were detected: | Name | Current | Proposed | Type | | ---- | ------- | -------- | ---- | | `libdjvulibre-dev` | `3.5.27.1-10` | `3.5.27.1-10 deb10u1` | Apt | | `libdjvulibre-text` | `3.5.27.1-10` | `3.5.27.1-10 deb10u1` | Apt | | `libdjvulibre21` | `3.5.27.1-10` | `3.5.27.1-10 deb10u1` | Apt | #### Files The following file modifications were detected: | Name | Current | Proposed | Diff | | ---- | ------- | -------- | ---- | | `/etc/apt/sources.list` | `421b` | `421b` | `0b` | | `/etc/machine-id` | `33b` | `33b` | `0b` | | `/etc/shadow` | `527b` | `527b` | `0b` | | `/etc/shadow-` | `501b` | `501b` | `0b` | | `/root/.gnupg/pubring.kbx` | `41kb` | `41kb` | `0b` | | `/root/.gnupg/pubring.kbx~` | `30kb` | `30kb` | `0b` | | `/root/.gnupg/random_seed` | `600b` | `600b` | `0b` | | `/root/.gnupg/trustdb.gpg` | `1.2kb` | `1.2kb` | `0b` | | `/tmp/v8-compile-cache-0/9.4.146.24-node.14/zSoptzSyarn-v1.22.15zSbinzSyarn.js.BLOB` | `2.1mb` | `2.1mb` | `0b` | | `/usr/lib/python3.7/__pycache__/_markupbase.cpython-37.pyc` | `7.6kb` | `7.6kb` | `0b` | | `/usr/lib/python3.7/__pycache__/_pyio.cpython-37.pyc` | `71kb` | `71kb` | `0b` | | `/usr/lib/python3.7/__pycache__/ftplib.cpython-37.pyc` | `27kb` | `27kb` | `0b` | | `/usr/lib/python3.7/__pycache__/hashlib.cpython-37.pyc` | `6.4kb` | `6.4kb` | `0b` | | `/usr/lib/python3.7/__pycache__/netrc.cpython-37.pyc` | `3.7kb` | `3.7kb` | `0b` | | `/usr/lib/python3.7/__pycache__/pathlib.cpython-37.pyc` | `41kb` | `41kb` | `0b` | | `/usr/lib/python3.7/__pycache__/pydoc.cpython-37.pyc` | `83kb` | `83kb` | `0b` | | `/usr/lib/python3.7/__pycache__/rlcompleter.cpython-37.pyc` | `5.6kb` | `5.6kb` | `0b` | | `/usr/lib/python3.7/asyncio/__pycache__/base_events.cpython-37.pyc` | `47kb` | `47kb` | `0b` | | `/usr/lib/x86_64-linux-gnu/libdjvulibre.a` | `4.2mb` | `4.3mb` | `10kb` | | `/usr/lib/x86_64-linux-gnu/libdjvulibre.so.21.6.0` | `1.7mb` | `1.7mb` | `4.0kb` | | `/usr/local/share/fonts/.uuid` | `36b` | `36b` | `0b` | | `/usr/share/doc/libdjvulibre-dev/changelog.Debian.gz` | `9.9kb` | `10kb` | `450b` | | `/usr/share/doc/libdjvulibre-text/changelog.Debian.gz` | `9.9kb` | `10kb` | `450b` | | `/usr/share/doc/libdjvulibre21/changelog.Debian.gz` | `9.9kb` | `10kb` | `450b` | | `/usr/share/fonts/.uuid` | `36b` | `36b` | `0b` | | `/usr/share/fonts/truetype/.uuid` | `36b` | `36b` | `0b` | | `/usr/share/fonts/truetype/dejavu/.uuid` | `36b` | `36b` | `0b` | | `/var/cache/fontconfig/226808dd-a9fb-4638-94a6-07c88d9ce725-le64.cache-7` | | `+` | `15kb` | | `/var/cache/fontconfig/22b46bb2-9fe9-4b23-94c1-cbe646520e76-le64.cache-7` | | `+` | `160b` | | `/var/cache/fontconfig/5757850b-88a7-4bba-b15d-858fc10b76e4-le64.cache-7` | | `-` | `0b` | | `/var/cache/fontconfig/d326040f-5ecb-4845-b6eb-36b99e5f82c4-le64.cache-7` | | `-` | `0b` | | `/var/cache/fontconfig/d5711693-c007-48da-8d91-ad1cfc5aacd8-le64.cache-7` | | `+` | `104b` | | `/var/cache/fontconfig/ddf4e777-44c2-4605-a6bb-3689feae36b3-le64.cache-7` | | `+` | `144b` | | `/var/cache/fontconfig/e1fe0f22-1599-43d9-839d-f26d47d8af67-le64.cache-7` | | `-` | `0b` | | `/var/cache/fontconfig/f800adaf-2069-47df-9a35-f4c090b9e6c0-le64.cache-7` | | `-` | `0b` | | `/var/cache/ldconfig/aux-cache` | `16kb` | `16kb` | `0b` | | `/var/lib/dpkg/info/libdjvulibre-dev:amd64.md5sums` | `1.5kb` | `1.5kb` | `0b` | | `/var/lib/dpkg/info/libdjvulibre-text.md5sums` | `1.3kb` | `1.3kb` | `0b` | | `/var/lib/dpkg/info/libdjvulibre21:amd64.md5sums` | `314b` | `314b` | `0b` | | `/var/lib/dpkg/info/libdjvulibre21:amd64.triggers` | `67b` | `67b` | `0b` | | `/var/lib/dpkg/status` | `377kb` | `377kb` | `40b` | | `/var/lib/dpkg/status-old` | `377kb` | `377kb` | `40b` | | `/var/log/alternatives.log` | `12kb` | `12kb` | `0b` | | `/var/log/apt/eipp.log.xz` | `19kb` | `19kb` | `4b` | | `/var/log/apt/history.log` | `15kb` | `15kb` | `24b` | | `/var/log/apt/term.log` | `82kb` | `82kb` | `72b` | | `/var/log/dpkg.log` | `158kb` | `158kb` | `168b` | #### History The following differences in [`docker history`](https://docs.docker.com/engine/reference/commandline/history/) were detected: ```diff -/bin/sh -c #(nop) ADD file:be998d04a8927e9c4b105995e3b9d6800ea798807389f7c5921c0f4774328e21 in / +/bin/sh -c #(nop) ADD file:a290acee3581e1e9c42c0a37b53086a8f070cb0730179be81a6ba24a620b6ee4 in / /bin/sh -c #(nop) CMD ["bash"] /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl netbase wget ; rm -rf /var/lib/apt/lists/* /bin/sh -c set -ex; if ! command -v gpg > /dev/null; then apt-get update; apt-get install -y --no-install-recommends gnupg dirmngr ; rm -rf /var/lib/apt/lists/*; fi ``` #### Ports No different exposed ports detected #### Environment Variables No different environment variables detected
Pinning
FROM
lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.File changed:
Dockerfile