From 0625d51c8d2792b39200abfd4e31d730d0c9265a Mon Sep 17 00:00:00 2001 From: Isaac Good Date: Fri, 8 May 2026 23:15:45 -0700 Subject: [PATCH] Use a pinned hash for the base Docker image and bump from Go 1.25 to 1.26 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index fb6a017..19260df 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.25.1-alpine3.22 as builder +FROM golang:1.26.1-alpine3.23@sha256:2389ebfa5b7f43eeafbd6be0c3700cc46690ef842ad962f6c5bd6be49ed82039 as builder # Install SSL ca certificates RUN apk update && apk add git && apk add ca-certificates @@ -27,7 +27,7 @@ RUN GOOS=linux GOARCH=amd64 go build --tags=build -o /go/bin/analyzer . # Build a minimal and secured container # The ast parser needs Go installed for import statements. # Therefore, unfortunately we cannot build from scratch as we would normally do with Go. -FROM golang:1.25.1-alpine3.22 +FROM golang:1.26.1-alpine3.23@sha256:2389ebfa5b7f43eeafbd6be0c3700cc46690ef842ad962f6c5bd6be49ed82039 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ COPY --from=builder /etc/passwd /etc/passwd COPY --from=builder /go/bin /opt/analyzer/bin