diff --git a/config/docker-compose-common-services.yaml b/config/docker-compose-common-services.yaml index a71ac8c..c1d621d 100644 --- a/config/docker-compose-common-services.yaml +++ b/config/docker-compose-common-services.yaml @@ -2,7 +2,7 @@ services: cloud-agent: container_name: cloud-agent - image: index.docker.io/sourcegraph/src-tunnel-agent:latest + image: index.docker.io/sourcegraph/src-tunnel-agent:latest@sha256:56e71dcfd95d3c2435dbc2b452fb08fe5adafd5a080f38e6a879d2955645129d volumes: - ../config/cloud-agent-service-account-key.json:/sourcegraph/cloud-agent-service-account-key.json:ro - ../config/cloud-agent-config.yaml:/sourcegraph/cloud-agent-config.yaml:ro @@ -14,7 +14,7 @@ services: src-serve-git: # Uses a valid hostname as container_name, to trick the cloud agent and code host config into finding this container on the Docker network container_name: src-serve-git-ubuntu.local - image: index.docker.io/sourcegraph/src-cli:latest + image: index.docker.io/sourcegraph/src-cli:latest@sha256:02cec288bae4d6fbf02cb4f1a7d53549b6ea68605f55552fcf3ababc071e2c65 volumes: - ../../../sg/r/:/sourcegraph/src-serve-root:ro command: "serve-git -addr :443 /sourcegraph/src-serve-root" diff --git a/repo-converter/build/Dockerfile b/repo-converter/build/Dockerfile index 1ea2d53..6ed839a 100644 --- a/repo-converter/build/Dockerfile +++ b/repo-converter/build/Dockerfile @@ -1,11 +1,11 @@ -# syntax=docker/dockerfile:1 +# syntax=docker/dockerfile:1@sha256:93bfd3b68c109427185cd78b4779fc82b484b0b7618e36d0f104d4d801e66d25 # Using version:1 means always getting the latest version of dockerfile syntax within major version 1 # https://docs.docker.com/build/dockerfile/frontend/#stable-channel # version:1 is still the most popular version # https://sourcegraph.com/search?q=context:global+%23+syntax%3Ddocker/dockerfile:(.*)&patternType=regexp&sm=0&expanded=&groupBy=group # Using Ubuntu LTS -FROM ubuntu:22.04 as base +FROM ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97 as base # Avoid stuck build due to user prompt ARG DEBIAN_FRONTEND=noninteractive diff --git a/repo-converter/docker-compose.yaml b/repo-converter/docker-compose.yaml index 55a5d7f..3e2b9bf 100644 --- a/repo-converter/docker-compose.yaml +++ b/repo-converter/docker-compose.yaml @@ -7,7 +7,7 @@ services: repo-converter: container_name: repo-converter - image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest + image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest@sha256:5acfe53120ac4b34a7043c615998337e9e5b3cb94e89eca4faf45ed754b4c488 volumes: - ../config/repos-to-convert.yaml:/sourcegraph/repos-to-convert.yaml:ro - ../config/toprc:/root/.config/procps/toprc