Skip to content
This repository was archived by the owner on Oct 20, 2026. It is now read-only.

build: MXTS-81879: pin base images by version and digest - #5

Merged
rsonke-maxxton merged 1 commit into
mainfrom
feature/MXTS-81879
Oct 14, 2026
Merged

rsonke-maxxton merged 1 commit into
mainfrom
feature/MXTS-81879

Conversation

@steven166

Copy link
Copy Markdown
Contributor

Pull Request Review

Default Reviewers

@MaxxtonGroup/devsecops

Please review the Code Review Guide for best practices.

Additional Notes

  • Dockerfile line 13: alpine:3.21 → alpine:3.21.8@sha256:ce64758a109eb420d874a118f87920e625e12d3634e03b4a5573fd9f6e5d3507 (3.21 was a moving tag)
  • Dependabot: the docker entry (limit 5) will bump the pin.

🤖 Generated with Claude Code

The digests are what the tags point at today, so the built images do not change. Floating tags are replaced by the exact version tag that shares their digest.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Copilot AI lite review requested due to automatic review settings October 14, 2026 11:56

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The single-line change implements the stated image pin without an identified issue.

0 open findings

What changed in this PR

Pins the runtime Alpine base image to a version and digest, making Docker builds more reproducible.

Changes:

  • Replaces the moving alpine:3.21 tag with alpine:3.21.8 and a SHA-256 digest.
File Description
Dockerfile Pins the runtime base image.

🧠 Review effort: Lite


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@maxxton-buddy maxxton-buddy Bot added the fix Does not add new functionality label Oct 14, 2026
@steven166
steven166 marked this pull request as ready for review October 14, 2026 12:10
@steven166
steven166 requested a review from a team as a code owner October 14, 2026 12:10
@rsonke-maxxton
rsonke-maxxton merged commit 4b23d02 into main Oct 14, 2026
4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

devsecops fix Does not add new functionality mxtu

Development

Successfully merging this pull request may close these issues.

3 participants