docker / sbom-cli-plugin

Plugin for Docker CLI to support SBOM creation using Syft
Apache License 2.0
150 stars 15 forks source link

Pin Docker base image in test/cli/test-fixtures/image-hidden-packages/Dockerfile #26

Open atomist[bot] opened 2 years ago

atomist[bot] commented 2 years ago

This pull request pins the Docker base image centos:7.9.2009 in test/cli/test-fixtures/image-hidden-packages/Dockerfile to the current digest.

https://github.com/docker/sbom-cli-plugin/blob/bacb372df80e8f2c55183476a4e96b1f875d0df7/test/cli/test-fixtures/image-hidden-packages/Dockerfile#L1-L1

Digest sha256:c73f515d06b0fa07bb18d8202035e739a494ce760aa73129f60f4bf2bd22b407 references a multi-CPU architecture image manifest. This image supports the following architectures:


Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.


File changed: