Skip to content

Pin alpine base image version in Dockerfile #740

@TineoC

Description

@TineoC

Description

Following up on the work done in #739 to pin gcb-docker-gcloud to a SHA256 digest, we should update the base image in our Dockerfile to a pinned version.

Currently, the Dockerfile uses alpine:latest:

Using mutable tags like latest can lead to non-reproducible builds or untracked package version bumps. We should update it to a pinned minor version or a specific SHA256 digest (e.g., alpine:3.20 or a specific digest).

CC: @Prajyot-Parab @Priyankasaggu11929 (@Prajyot @Priyanka)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions