Skip to content

Commit 39047e7

Browse files
chore: pin node 24 base image to sha256 digest (#125)
Set the base image to node:24-alpine@sha256:5fa278c599dbba0c8f873d8717d50ecbb57c5ae6a53b7ab240c25135e0b65995 (was node:24-alpine) and pin it to an immutable sha256 digest for reproducible builds.
1 parent 7cdea0d commit 39047e7

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
ARG RUN
22

3-
FROM node:24-alpine as builderenv
3+
FROM node:24-alpine@sha256:5fa278c599dbba0c8f873d8717d50ecbb57c5ae6a53b7ab240c25135e0b65995 as builderenv
44

55
WORKDIR /app
66

@@ -18,7 +18,7 @@ RUN yarn install --prod --frozen-lockfile
1818

1919
########################## END OF BUILD STAGE ##########################
2020

21-
FROM node:24-alpine
21+
FROM node:24-alpine@sha256:5fa278c599dbba0c8f873d8717d50ecbb57c5ae6a53b7ab240c25135e0b65995
2222

2323
RUN apk update && apk add --update wget && apk add --update tini
2424

0 commit comments

Comments
 (0)