Pin golang Docker tag to cf6fca6 - #36
renovate[bot] wants to merge 1 commit into
Conversation
d3ae6ea to
52a45e6
Compare
52a45e6 to
0cab8ce
Compare
0cab8ce to
7ea1885
Compare
7ea1885 to
04442f0
Compare
cbf165a to
bb29fdc
Compare
bb29fdc to
f4486aa
Compare
f4486aa to
b4a4218
Compare
There was a problem hiding this comment.
Pull request overview
This PR pins the Go builder image in the Dockerfile to a specific immutable digest to make container builds more reproducible and supply-chain-safe.
Changes:
- Pin
golang:1.27-alpinebuilder stage tosha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
b4a4218 to
a8e8938
Compare
There was a problem hiding this comment.
🟢 Approval recommended
The change is a low-risk digest pin that improves determinism, with only a minor follow-up suggestion around also pinning the runtime base image.
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 1
- Review effort level: Lite
|
|
||
| # Build the manager binary | ||
| FROM golang:1.27-alpine AS builder | ||
| FROM golang:1.27-alpine@sha256:26402d86be3d72e6a9410afa0108f03529f51f0c1b5eb7f503d0bc44cc7857ac AS builder |
a8e8938 to
2a06db6
Compare
There was a problem hiding this comment.
🟢 Approval recommended
The change is a straightforward base image digest pin with no behavioral code changes and no issues found in the updated Dockerfile.
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0 new
- Review effort level: Lite
2a06db6 to
daeda69
Compare
There was a problem hiding this comment.
🟢 Approval recommended
The change is a straightforward digest pin that improves build determinism without altering build steps or runtime behavior.
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0 new
- Review effort level: Lite
daeda69 to
fe1d030
Compare
This PR contains the following updates:
cf6fca6Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.