Skip to content

Pin Docker base images in benchmark-overhead/Dockerfile-petclinic-base#1

Open
docker-scout[bot] wants to merge 2 commits intomainfrom
atomist/pin-docker-base-image/benchmark-overhead/dockerfile-petclinic-base
Open

Pin Docker base images in benchmark-overhead/Dockerfile-petclinic-base#1
docker-scout[bot] wants to merge 2 commits intomainfrom
atomist/pin-docker-base-image/benchmark-overhead/dockerfile-petclinic-base

Conversation

@docker-scout
Copy link
Copy Markdown

@docker-scout docker-scout bot commented Feb 10, 2023

This pull request pins the following Docker base images in benchmark-overhead/Dockerfile-petclinic-base to their current digests.

FROM adoptopenjdk:11-jdk@sha256:0f081fe6de07a0a97d74768f512e2a2f2493cb5f383d7d4fa9f46a6d689b6850 as app-build

Digest sha256:0f081fe6de07a0a97d74768f512e2a2f2493cb5f383d7d4fa9f46a6d689b6850 references a multi-CPU architecture image manifest. This image supports the following architectures:


FROM bellsoft/liberica-openjdk-alpine:11@sha256:45bfbd7b87ed430a84d1b5021520a83f68c4b16a60cd39bda76258fe5e1e2a15

Digest sha256:45bfbd7b87ed430a84d1b5021520a83f68c4b16a60cd39bda76258fe5e1e2a15 references a multi-CPU architecture image manifest. This image supports the following architectures:


Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.


File changed:

adoptopenjdk:11-jdk
->
adoptopenjdk:11-jdk@sha256:0f081fe6de07a0a97d74768f512e2a2f2493cb5f383d7d4fa9f46a6d689b6850

 [atomist:generated]
 [atomist-skill:atomist/docker-base-image-policy]

Signed-off-by: Atomist Bot <bot@atomist.com>
bellsoft/liberica-openjdk-alpine:11
->
bellsoft/liberica-openjdk-alpine:11@sha256:45bfbd7b87ed430a84d1b5021520a83f68c4b16a60cd39bda76258fe5e1e2a15

 [atomist:generated]
 [atomist-skill:atomist/docker-base-image-policy]

Signed-off-by: Atomist Bot <bot@atomist.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant