File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -8,7 +8,7 @@ ARG RELEASE_CHANNEL=dev
88
99# Stage 1: Build frontend
1010# Pin to digest for reproducible builds (Dependabot will update this)
11- FROM node:24-alpine@sha256:cd6fb7efa6490f039f3471a189214d5f548c11df1ff9e5b181aa49e22c14383e AS frontend-builder
11+ FROM node:24-alpine@sha256:7fddd9ddeae8196abf4a3ef2de34e11f7b1a722119f91f28ddf1e99dcafdf114 AS frontend-builder
1212
1313WORKDIR /app/frontend
1414
@@ -27,7 +27,7 @@ RUN npm run build
2727# Stage 2: Build Python dependencies
2828# Use Chainguard's dev image which includes pip and build tools
2929# Pin to digest for reproducible builds (Dependabot will update this)
30- FROM cgr.dev/chainguard/python:latest-dev@sha256:16ef9480a72a9e1f422ade7c60c7d4d4a3ef258b676ecd223ae137972c3520fc AS python-builder
30+ FROM cgr.dev/chainguard/python:latest-dev@sha256:90e7427f9fc2ef755002aced581c81b1257870c06a3463bbb9704fcd9387e738 AS python-builder
3131
3232WORKDIR /app
3333
@@ -46,7 +46,7 @@ RUN python -m venv /app/venv && \
4646# Stage 3: Runtime with minimal Chainguard image
4747# This image has 0-5 CVEs typically vs 800+ in python:3.12-slim
4848# Pin to digest for reproducible builds (Dependabot will update this)
49- FROM cgr.dev/chainguard/python:latest@sha256:90d81f1d75d9042571a6776b89763678f77fae44e399baf823466091bd494b02
49+ FROM cgr.dev/chainguard/python:latest@sha256:e47c748a643dc09d98587839d62ae8b76aa2a192af6ec6506fa6a305901b7810
5050
5151# Re-declare build args for this stage
5252ARG BUILD_TIME=unknown
You can’t perform that action at this time.
0 commit comments