Image pinning (#97)

trstringer · Feb 26, 2024 · e7e4c29 · e7e4c29
1 parent b6813f2
commit e7e4c29
Show file tree

Hide file tree

Showing 7 changed files with 9 additions and 9 deletions.
diff --git a/dockerfiles/Dockerfile.cart b/dockerfiles/Dockerfile.cart
@@ -4,6 +4,6 @@ COPY . /var/app
 WORKDIR /var/app
 RUN CGO_ENABLED=0 go build -o cart ./cmd/cart
 
-FROM alpine:3
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
 COPY --from=builder /var/app/cart /var/app/cart
 ENTRYPOINT ["/var/app/cart"]
diff --git a/dockerfiles/Dockerfile.collector b/dockerfiles/Dockerfile.collector
@@ -1,11 +1,11 @@
-FROM alpine:3.13 as certs
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS certs
 RUN apk --update add ca-certificates
 
-FROM alpine:3.13 AS collector-build
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS collector-build
 COPY ./collector/dist/otel-shopping-cart-collector /otel-shopping-cart-collector
 RUN chmod 755 /otel-shopping-cart-collector
 
-FROM ubuntu:latest
+FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da
 LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval
 
 ARG USER_UID=10001

diff --git a/dockerfiles/Dockerfile.dataseed b/dockerfiles/Dockerfile.dataseed
@@ -1,4 +1,4 @@
-FROM ubuntu:latest
+FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da
 LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval
 WORKDIR /var/app
 COPY ./database/setup.sql /var/app

diff --git a/dockerfiles/Dockerfile.interrupter b/dockerfiles/Dockerfile.interrupter
@@ -3,7 +3,7 @@ COPY . /var/app
 WORKDIR /var/app
 RUN CGO_ENABLED=0 go build -o interrupter ./cmd/interrupter
 
-FROM alpine:3
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
 LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval
 COPY --from=builder /var/app/interrupter /var/app/interrupter
 ENTRYPOINT ["/var/app/interrupter"]
diff --git a/dockerfiles/Dockerfile.price b/dockerfiles/Dockerfile.price
@@ -1,4 +1,4 @@
-FROM ubuntu:latest
+FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da
 LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval
 COPY \
     ./external/price_server \

diff --git a/dockerfiles/Dockerfile.trafficgen b/dockerfiles/Dockerfile.trafficgen
@@ -3,7 +3,7 @@ COPY . /var/app
 WORKDIR /var/app
 RUN CGO_ENABLED=0 go build -o trafficgen ./cmd/trafficgen
 
-FROM alpine:3
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
 LABEL org.opencontainers.image.source https://github.com/trstringer/manual-approval
 COPY --from=builder /var/app/trafficgen /var/app/trafficgen
 ENTRYPOINT ["/var/app/trafficgen"]
diff --git a/dockerfiles/Dockerfile.users b/dockerfiles/Dockerfile.users
@@ -4,6 +4,6 @@ COPY . /var/app
 WORKDIR /var/app
 RUN CGO_ENABLED=0 go build -o users ./cmd/users
 
-FROM alpine:3
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
 COPY --from=builder /var/app/users /var/app/users
 ENTRYPOINT ["/var/app/users"]