Skip to content

build(deps): pin base images by digest#71

Merged
edmondas merged 1 commit into
mainfrom
fix/pin-docker-images-by-digest
May 31, 2026
Merged

build(deps): pin base images by digest#71
edmondas merged 1 commit into
mainfrom
fix/pin-docker-images-by-digest

Conversation

@edmondas
Copy link
Copy Markdown
Member

Summary

  • Resolves Scorecard Pinned-Dependencies alert build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 #63 (containerImage not pinned by hash)
  • Pin golang:1.26.3-alpine to sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d
  • Pin gcr.io/distroless/static-debian12:nonroot to sha256:d093aa3e30dbadd3efe1310db061a14da60299baff8450a17fe0ccc514a16639
  • Dependabot docker ecosystem already tracks the repo, so digest pins will continue to receive updates

@edmondas edmondas merged commit b737873 into main May 31, 2026
11 checks passed
@edmondas edmondas deleted the fix/pin-docker-images-by-digest branch May 31, 2026 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant