From 91c4b139cd5bc663e1fa6bf498637705373ba666 Mon Sep 17 00:00:00 2001 From: "red-hat-konflux[bot]" <126015336+red-hat-konflux[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 10:14:59 +0000 Subject: [PATCH] chore(deps): pin dependencies Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> --- debug-container-fedramp/Dockerfile | 2 +- debug-container/Dockerfile | 2 +- dynatrace-ci/Dockerfile | 2 +- dynatrace-config-job/Dockerfile | 2 +- jiralert/Dockerfile | 4 ++-- lablabs-cloudflare-exporter/Dockerfile | 4 ++-- logrotate/Dockerfile | 2 +- metrics-api-server/Dockerfile | 2 +- packer/Dockerfile | 2 +- qontract-reconcile-base/Dockerfile | 4 ++-- qontract-reconcile-builder/Dockerfile | 2 +- qontract-reconcile-oc/Dockerfile | 2 +- 12 files changed, 15 insertions(+), 15 deletions(-) diff --git a/debug-container-fedramp/Dockerfile b/debug-container-fedramp/Dockerfile index dc142c6..9f90f9f 100644 --- a/debug-container-fedramp/Dockerfile +++ b/debug-container-fedramp/Dockerfile @@ -2,7 +2,7 @@ # NOTE: postgres utils here are set to v14 by design #FROM registry.access.redhat.com/ubi8/ubi:8.8 -FROM registry.access.redhat.com/ubi8/ubi:8.8 +FROM registry.access.redhat.com/ubi8/ubi:8.8@sha256:c94bc309b197f9fc465052123ead92bf50799ba72055bd040477ded452d87a0d RUN dnf -y --refresh --security upgrade && \ dnf -y install dnf-utils \ diff --git a/debug-container/Dockerfile b/debug-container/Dockerfile index 642c0bc..bf8a5ba 100644 --- a/debug-container/Dockerfile +++ b/debug-container/Dockerfile @@ -1,6 +1,6 @@ # Locking this to a specific Fedora version for now. New releases of Postgresql, and Fedora versions going out of # support will drive this upgrade every 6-12 months. -FROM quay.io/fedora/fedora:39 +FROM quay.io/fedora/fedora:39@sha256:88b3e87a5971d727e1ac7e271cc853e1bcf77ec092a710a688e26c3561442c69 RUN dnf -y update && \ dnf -y install \ diff --git a/dynatrace-ci/Dockerfile b/dynatrace-ci/Dockerfile index 6d0bcc7..3e782e6 100644 --- a/dynatrace-ci/Dockerfile +++ b/dynatrace-ci/Dockerfile @@ -6,7 +6,7 @@ FROM ${TERRAFORM_REPO}:${TERRAFORM_VERSION} as terraform COPY providers.tf . RUN terraform providers mirror -platform=linux_amd64 /plugins -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2@sha256:c8c7a06ce1c5fa23c1cbd7a0fd891eacd099bc232aa9985ddb183cfe98d1deaf WORKDIR /terraform diff --git a/dynatrace-config-job/Dockerfile b/dynatrace-config-job/Dockerfile index a91d0d8..b571d52 100644 --- a/dynatrace-config-job/Dockerfile +++ b/dynatrace-config-job/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2@sha256:c8c7a06ce1c5fa23c1cbd7a0fd891eacd099bc232aa9985ddb183cfe98d1deaf # https://konflux.pages.redhat.com/docs/users/how-tos/configuring/custom-tags.html # Set your image version here diff --git a/jiralert/Dockerfile b/jiralert/Dockerfile index 0c11ddf..7f2549c 100644 --- a/jiralert/Dockerfile +++ b/jiralert/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi8/go-toolset:1.20.12 as builder +FROM registry.access.redhat.com/ubi8/go-toolset:1.20.12@sha256:43cf2468d9ebecbdf69503ca9cfb4a7c58ee86c94b64fb024c8aebd1bedc816e as builder ENV GOPATH=/go/ ENV GO111MODULE=on USER root @@ -9,7 +9,7 @@ RUN git checkout d43cbab62126d543e8e789f6374d9e745693cce2 # run just build and skip all other steps because the linter needs to much memory RUN make build -FROM registry.access.redhat.com/ubi8-minimal:8.9 +FROM registry.access.redhat.com/ubi8-minimal:8.9@sha256:2fa47fa9df7b98e2776f447855699c01d06c3271b2d7259b8b314084580cf591 RUN microdnf update -y \ && rm -rf /var/cache/yum \ && microdnf install ca-certificates diff --git a/lablabs-cloudflare-exporter/Dockerfile b/lablabs-cloudflare-exporter/Dockerfile index afe13f9..27bf411 100644 --- a/lablabs-cloudflare-exporter/Dockerfile +++ b/lablabs-cloudflare-exporter/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi8/go-toolset:1.18.9 as builder +FROM registry.access.redhat.com/ubi8/go-toolset:1.18.9@sha256:4b55f47e67e019eda42d7f959918cfa53b6d0580b73234b46675bc598e9e2e4e as builder ENV GOPATH=/go/ ENV GO111MODULE=on USER root @@ -9,7 +9,7 @@ RUN git clone \ # RUN go get -d -v RUN CGO_ENABLED=0 GOOS=linux go build -o cloudflare_exporter . -FROM registry.access.redhat.com/ubi8-minimal:8.5 +FROM registry.access.redhat.com/ubi8-minimal:8.5@sha256:3f32ebba0cbf3849a48372d4fc3a4ce70816f248d39eb50da7ea5f15c7f9d120 RUN microdnf update -y \ && rm -rf /var/cache/yum \ && microdnf install ca-certificates diff --git a/logrotate/Dockerfile b/logrotate/Dockerfile index a976ded..237aa12 100644 --- a/logrotate/Dockerfile +++ b/logrotate/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4@sha256:c0e70387664f30cd9cf2795b547e4a9a51002c44a4a86aa9335ab030134bf392 # Install logrotate RUN microdnf update && \ diff --git a/metrics-api-server/Dockerfile b/metrics-api-server/Dockerfile index 26f8b5a..f945575 100644 --- a/metrics-api-server/Dockerfile +++ b/metrics-api-server/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/python-311 +FROM registry.access.redhat.com/ubi9/python-311@sha256:129391e5b291e29a3b24a3fdb281a56d7cb8297bdf8ba92bb5c8581b53084324 WORKDIR /app diff --git a/packer/Dockerfile b/packer/Dockerfile index 9ca2460..bbd262e 100644 --- a/packer/Dockerfile +++ b/packer/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi8/ubi-minimal:latest +FROM registry.access.redhat.com/ubi8/ubi-minimal:latest@sha256:7583ca0ea52001562bd81a961da3f75222209e6192e4e413ee226cff97dbd48c RUN curl --location --output /etc/yum.repos.d/hashicorp.repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo RUN microdnf install packer jq openssh-clients unzip rsync python3 rust cargo gcc python3-devel openssl-devel diff --git a/qontract-reconcile-base/Dockerfile b/qontract-reconcile-base/Dockerfile index 1b749e8..01b969d 100644 --- a/qontract-reconcile-base/Dockerfile +++ b/qontract-reconcile-base/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi:9.4 AS downloader +FROM registry.access.redhat.com/ubi9/ubi:9.4@sha256:ee0b908e958a1822afc57e5d386d1ea128eebe492cb2e01b6903ee19c133ea75 AS downloader RUN dnf -y install unzip glibc-langpack-en @@ -88,7 +88,7 @@ RUN curl -sfL https://github.com/prometheus/alertmanager/releases/download/v${AL | tar -zxf - -C /usr/local/bin --strip-components=1 alertmanager-${ALERTMANAGER_VERSION}.linux-amd64/amtool -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4@sha256:c0e70387664f30cd9cf2795b547e4a9a51002c44a4a86aa9335ab030134bf392 ENV TF_PLUGIN_LOCAL_DIR=/usr/local/share/terraform/ ENV TF_PLUGIN_CACHE_DIR=/.terraform.d/plugin-cache/ diff --git a/qontract-reconcile-builder/Dockerfile b/qontract-reconcile-builder/Dockerfile index 6c3d11f..9d2a826 100644 --- a/qontract-reconcile-builder/Dockerfile +++ b/qontract-reconcile-builder/Dockerfile @@ -1,4 +1,4 @@ -FROM quay.io/app-sre/qontract-reconcile-base:0.14.0 as base +FROM quay.io/app-sre/qontract-reconcile-base:0.14.0@sha256:bd6f0de349fab0cce58ba9e5b0f01296688f26038b1ac3730b04eb8c270e255c as base WORKDIR /work diff --git a/qontract-reconcile-oc/Dockerfile b/qontract-reconcile-oc/Dockerfile index a010672..7edb32f 100644 --- a/qontract-reconcile-oc/Dockerfile +++ b/qontract-reconcile-oc/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi:9.3 +FROM registry.access.redhat.com/ubi9/ubi:9.3@sha256:66233eebd72bb5baa25190d4f55e1dc3fff3a9b77186c1f91a0abdb274452072 WORKDIR /work