ral-facilities / scigateway-auth

Authentication API for the SciGateway web application
Apache License 2.0
0 stars 1 forks source link

Pin python docker images to SHA #117

Open VKTB opened 7 months ago

VKTB commented 7 months ago

Description

This PR pins the Python docker images in the Dockerfiles to commit SHAs so that Dependabot can create PRs each time there is a change in the upstream base images that the Python image is set to use as new SHAs are generated on every upstream change. Unfortunately, Dependabot only updates the Python versions but not the OS versions and there is an open issue for this. This means that we will have to do the Alpine version updates manually for now. This PR also configures Dependabot to ignore Python major and minor versions so again we will have to do such Python upgrades manually when we are ready to do that.

Testing Instructions

codecov-commenter commented 7 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 65.55%. Comparing base (bef86ae) to head (0bc0b01).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #117 +/- ## ======================================= Coverage 65.55% 65.55% ======================================= Files 9 9 Lines 360 360 Branches 13 13 ======================================= Hits 236 236 Misses 124 124 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.