search

docker / docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Apache License 2.0
9.17k stars 1.02k forks source link

Pin Docker base image in distros/Dockerfile.debian #506

Closed atomist[bot] closed 2 years ago

atomist[bot] commented 2 years ago

This pull request pins the Docker base image debian:sid in distros/Dockerfile.debian to the current digest.

https://github.com/docker/docker-bench-security/blob/553c11f3a95a8fc20e4d87d078295b1392b9df50/distros/Dockerfile.debian#L1-L1

Digest sha256:022a3cafe84d704c272794863ca5e383667c99312358e816ad1ff6e9a41ce4f6 references a multi-CPU architecture image manifest. This image supports the following architectures:

Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.

File changed: