atomist-skills / skill-base

Apache License 2.0
0 stars 0 forks source link

Re-pin Docker base image in Dockerfile #72

Closed atomist[bot] closed 2 years ago

atomist[bot] commented 2 years ago

This pull request re-pins the Docker base image alpine:3.15 in Dockerfile to the current digest.

https://github.com/atomist-skills/skill-base/blob/c62b9cc8b1a331b9c074a22a10f775cb30ec005b/Dockerfile#L1-L1

Digest sha256:ceeae2849a425ef1a7e591d8288f1a58cdf1f4e8d9da7510e29ea829e61cf512 references a multi-CPU architecture image manifest. This image supports the following architectures:

Changelog for alpine:3.15

### Commit New image build caused by commit docker-library/official-images@72599f4196000032663a637e542cd23b4dc68936 to [`library/alpine`](https://github.com/docker-library/official-images/blob/72599f4196000032663a637e542cd23b4dc68936/library/alpine): ``` alpine: bump 3.15.2 (libretls CVE-2022-0778) Fix libretls CVE-2022-0778 ``` --- ### Comparison Comparing Docker image `alpine:3.15` at digests _Current_ `sha256:d6d0a0eb4d40ef96f2310ead734848b9c819bb97c9d846385c4aca1767186cd4` and _Proposed_ `sha256:ceeae2849a425ef1a7e591d8288f1a58cdf1f4e8d9da7510e29ea829e61cf512` : #### Packages No package differences detected #### Files The following file modifications were detected: | Name | Current | Proposed | Diff | | ---- | ------- | -------- | ---- | | `/etc/alpine-release` | `7b` | `7b` | `0b` | | `/etc/os-release` | `164b` | `164b` | `0b` | | `/lib/apk/db/installed` | `14kb` | `14kb` | `0b` | | `/usr/lib/libtls.so.2.0.3` | `66kb` | `66kb` | `0b` | #### History The following differences in [`docker history`](https://docs.docker.com/engine/reference/commandline/history/) were detected: ```diff -/bin/sh -c #(nop) ADD file:cd7d91362950471ca4678cf3833dc47119ab519dea51424c847bbbb21e1649d4 in / +/bin/sh -c #(nop) ADD file:30da1868f9f0555fb3e5223cd75cbf3c31760c1b6087f42d78abb08a8c5066ff in / /bin/sh -c #(nop) CMD ["/bin/sh"] ``` #### Ports No different exposed ports detected #### Environment Variables No different environment variables detected


Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.


File changed: