github-community-projects / private-mirrors

A GitHub App that allows you to contribute upstream using private mirrors of public projects
MIT License
119 stars 12 forks source link

chore: pin shas in Dockerfile #180

Closed zkoppert closed 2 months ago

zkoppert commented 2 months ago

Pull Request

Proposed Changes

The base image of the Dockerfile has been updated to use a specific version of the python:3.12-slim image. This is done by referencing the image's SHA256 digest, which ensures that the same image is always used, increasing the reproducibility and security of the Docker build.

Readiness Checklist

Author/Contributor

Reviewer