search

atomist-skills / skill-base

Apache License 2.0
0 stars 0 forks source link

Re-pin Docker base image in Dockerfile #43

Closed atomist[bot] closed 3 years ago

atomist[bot] commented 3 years ago

This pull request re-pins the Docker base image ubuntu:rolling in Dockerfile to the current digest.

https://github.com/atomist-skills/skill-base/blob/67b1575bb1d1013a77644d8d4a8f7f827f081814/Dockerfile#L1-L1

Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.

File changed:

atomist[bot] commented 3 years ago

ℹ️ Contains 23 high, 31 medium and 2 low severity vulnerabilities

🎉 Fixes 1 high severity vulnerability compared to target branch main

More details are available in the vulnerability report