rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Pin Dockerfile base image to digest for reproducibility

Browse Source 
Pin ubuntu:24.04 to a specific SHA256 digest to ensure reproducible builds
and protect against supply chain attacks via floating tags.

The tag is kept alongside the digest for readability and to help with
future updates.
This commit is contained in:
mendral-app[bot]
2026-02-04 23:07:13 -08:00
committed by GitHub
parent e2a1f35e4e
commit 80cdac417a
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Dockerfile
View File

@@ -1,4 +1,5 @@
FROM ubuntu:24.04
# ubuntu:24.04 - pinned to digest for reproducibility (2026-02-05)
FROM ubuntu:24.04@sha256:cd1dba651b3080c3686ecf4e3c4220f026b521fb76978881737d24f200828b2b
LABEL org.opencontainers.image.source="https://github.com/getprobo/probo"
LABEL org.opencontainers.image.licenses="MIT"