Skip to content

Pin all base images in Dockerfiles to SHA256 digests #1188

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 12, 2025
Merged

Pin all base images in Dockerfiles to SHA256 digests #1188

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion scripts/packages/packager/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
ARG package_type

FROM docker.io/golang:1.24-bullseye AS base
FROM docker.io/golang@sha256:62ba6b19de03e891f7fa1001326bd48411f2626ff35e7ba5b9d890711ce581d9 AS base

ARG PKG_VER="1.17.5"
ARG PKG_DIR="/tmp/pkg"
Expand Down
2 changes: 1 addition & 1 deletion test/docker/load/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM ubuntu:24.04 as base
FROM ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061 AS base
LABEL maintainer="NGINX Docker Maintainers <docker-maint@nginx.com>"

# https://askubuntu.com/questions/909277/avoiding-user-interaction-with-tzdata-when-installing-certbot-in-a-docker-contai
Expand Down
2 changes: 1 addition & 1 deletion test/integration/auxiliarycommandserver/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM debian:buster-slim
FROM debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc

WORKDIR /mock-management-plane-grpc
COPY ./build/mock-management-plane-grpc ./
Expand Down
2 changes: 1 addition & 1 deletion test/mock/collector/mock-collector/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM golang:bookworm
FROM golang:bookworm@sha256:ef8c5c733079ac219c77edab604c425d748c740d8699530ea6aced9de79aea40

WORKDIR /mock-management-otel-collector
COPY ./build/mock-management-otel-collector ./
Expand Down
2 changes: 1 addition & 1 deletion test/mock/grpc/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM debian:buster-slim
FROM debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc

WORKDIR /mock-management-plane-grpc
COPY ./build/mock-management-plane-grpc ./
Expand Down