Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3.12.12-alpine3.22@sha256:d82291d418d5c47f267708393e40599ae836f2260b0519dd38670e9d281657f5 AS pipenv
FROM python:3.13.11-alpine3.22
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please ensure the image is pinned with the correct hash.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image I’ve updated the Dockerfile to pin python:3.13.11-alpine3.22 with digest sha256:2fd9…4045 and pushed the change, so the image is now correctly pinned.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi the sha pin need to follow after the image like this:

python:3.12.12-alpine3.22@sha256:d82291d418d5c47f267708393e40599ae836f2260b0519dd38670e9d281657f5

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the clarification! I will update the FROM line to pin the image and digest in the same token (e.g. python:3.13.11-alpine3.22@sha256:…) and push the change.

RUN apk add --no-cache shadow
# UID of current user who runs the build
ARG user_id
Expand Down Expand Up @@ -35,4 +35,4 @@ RUN pipenv --python "$(which python)" install --no-cache-dir --ignore-pipfile --
ENTRYPOINT ["/usr/local/bin/pipenv"]

FROM mvdan/shfmt@sha256:caa0324bdba08f42452a19e6a8462dda9852a1e43ad16185ec3d1ad66524a504 AS shfmt
ENTRYPOINT ["/bin/shfmt"]
ENTRYPOINT ["/bin/shfmt"]
Loading