chore(deps): pin dependencies

deckhouse · Sep 2, 2024 · 0c352fc · 0c352fc
1 parent f04f53e
commit 0c352fc
Show file tree

Hide file tree

Showing 7 changed files with 12 additions and 12 deletions.
diff --git a/images/dvcr-artifact/build/importer.Dockerfile b/images/dvcr-artifact/build/importer.Dockerfile
@@ -1,4 +1,4 @@
-ARG BUILDER_CACHE_IMAGE=golang:1.21-bookworm
+ARG BUILDER_CACHE_IMAGE=golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9
 FROM $BUILDER_CACHE_IMAGE AS builder
 
 # Cache-friendly download modules.
@@ -13,7 +13,7 @@ RUN apt-get -qq update && apt-get -qq install -y --no-install-recommends libnbd-
 RUN GOOS=linux \
     go build -o importer ./cmd/dvcr_importer
 
-FROM debian:bookworm-slim
+FROM debian:bookworm-slim@sha256:2ccc7e39b0a6f504d252f807da1fc4b5bcd838e83e4dec3e2f57b2a4a64e7214
 RUN apt-get -qq update && apt-get -qq install -y --no-install-recommends \
     ca-certificates \
     libnbd0 \

diff --git a/images/dvcr-artifact/build/uploader.Dockerfile b/images/dvcr-artifact/build/uploader.Dockerfile
@@ -1,4 +1,4 @@
-ARG BUILDER_CACHE_IMAGE=golang:1.21-bookworm
+ARG BUILDER_CACHE_IMAGE=golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9
 FROM $BUILDER_CACHE_IMAGE AS builder
 
 # Cache-friendly download modules.
@@ -13,7 +13,7 @@ RUN apt-get -qq update && apt-get -qq install -y --no-install-recommends libnbd-
 RUN GOOS=linux \
     go build -o uploader ./cmd/dvcr_uploader
 
-FROM debian:bookworm-slim
+FROM debian:bookworm-slim@sha256:2ccc7e39b0a6f504d252f807da1fc4b5bcd838e83e4dec3e2f57b2a4a64e7214
 RUN apt-get -qq update && apt-get -qq install -y --no-install-recommends \
     ca-certificates \
     libnbd0 \

diff --git a/images/kube-api-proxy/local/Dockerfile b/images/kube-api-proxy/local/Dockerfile
@@ -1,5 +1,5 @@
 # Go builder.
-FROM golang:1.21-alpine3.19 AS builder
+FROM golang:1.21-alpine3.19@sha256:05a0855f995505bd8832ac8d5132ed097c08bf7e46119818e8c774cda954b04b AS builder
 
 # Cache-friendly download of go dependencies.
 ADD go.mod go.sum /app/
@@ -12,7 +12,7 @@ RUN GOOS=linux \
     go build -o proxy ./cmd/kube-api-proxy
 
 # Go builder.
-FROM golang:1.21-alpine3.19 AS builder-test-controller
+FROM golang:1.21-alpine3.19@sha256:05a0855f995505bd8832ac8d5132ed097c08bf7e46119818e8c774cda954b04b AS builder-test-controller
 
 # Cache-friendly download of go dependencies.
 ADD local/test-controller/go.mod local/test-controller/go.sum /app/
@@ -24,7 +24,7 @@ ADD local/test-controller/main.go /app/
 RUN GOOS=linux \
     go build -o test-controller .
 
-FROM alpine:3.19
+FROM alpine:3.19@sha256:95c16745f100f44cf9a0939fd3f357905f845f8b6fa7d0cde0e88c9764060185
 RUN apk --no-cache add ca-certificates bash sed tini curl && \
     kubectlArch=linux/amd64 && \
     echo "Download kubectl for ${kubectlArch}" && \

diff --git a/images/virtualization-artifact/hack/dlv-controller.Dockerfile b/images/virtualization-artifact/hack/dlv-controller.Dockerfile
@@ -21,7 +21,7 @@ ENV CGO_ENABLED=0
 
 RUN go build -gcflags "all=-N -l" -a -o virtualization-controller ./cmd/virtualization-controller
 
-FROM busybox:1.36.1-musl
+FROM busybox:1.36.1-musl@sha256:d097373897633648934dce99c57a4ddfc9b31872c64c5bd35ea986fc47a53fcb
 
 WORKDIR /app
 COPY --from=builder /go/bin/dlv /app/dlv

diff --git a/images/virtualization-artifact/local/caddy/Dockerfile b/images/virtualization-artifact/local/caddy/Dockerfile
@@ -1,2 +1,2 @@
-FROM caddy:2.4.5
+FROM caddy:2.4.5@sha256:874405536b3ec82342977f386353e82f2a728fd1984f2cf7e94996f7dda5d09e
 ADD images /usr/share/caddy/images/
diff --git a/images/virtualization-artifact/local/virtualization-controller/Dockerfile b/images/virtualization-artifact/local/virtualization-controller/Dockerfile
@@ -1,4 +1,4 @@
-ARG BUILDER_CACHE_IMAGE=golang:1.20-alpine3.16
+ARG BUILDER_CACHE_IMAGE=golang:1.20-alpine3.16@sha256:6469405d7297f82d56195c90a3270b0806ef4bd897aa0628477d9959ab97a577
 FROM $BUILDER_CACHE_IMAGE AS builder
 
 # Cache-friendly download modules.
@@ -13,7 +13,7 @@ RUN GOOS=linux \
     go build -o virtualization-controller ./cmd/virtualization-controller
 
 
-FROM alpine:3.18
+FROM alpine:3.18@sha256:5292533eb4efd4b5cf35e93b5a2b7d0e07ea193224c49446c7802c19ee4f2da5
 # curl for testing progress metrics
 RUN apk add --no-cache curl
 COPY --from=builder /app/virtualization-controller /
diff --git a/images/vm-route-forge/dlv.Dockerfile b/images/vm-route-forge/dlv.Dockerfile
@@ -17,7 +17,7 @@ ENV CGO_ENABLED=0
 
 RUN go build -gcflags "all=-N -l" -v -a -o vm-route-forge cmd/vm-route-forge/main.go
 
-FROM busybox
+FROM busybox@sha256:82742949a3709938cbeb9cec79f5eaf3e48b255389f2dcedf2de29ef96fd841c
 
 COPY --from=builder /go/bin/dlv /app/dlv
 COPY --from=builder /app/images/vm-route-forge/vm-route-forge /app/vm-route-forge