Pin dependencies

pagopa · Jun 24, 2024 · c8ba857 · c8ba857
1 parent 983e6d2
commit c8ba857
Show file tree

Hide file tree

Showing 8 changed files with 9 additions and 9 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -17,7 +17,7 @@
 # docker run -i --rm -p 8080:8080 quarkus/poc-quarkus
 #
 ###
-FROM quay.io/quarkus/quarkus-micro-image:1.0
+FROM quay.io/quarkus/quarkus-micro-image:1.0@sha256:603ee696016035dc5f8b28fd007a41f89f464b7ce8ff92aaece824e8ad8478a2
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

diff --git a/docker/Dockerfile.jvm b/docker/Dockerfile.jvm
@@ -75,7 +75,7 @@
 #   accessed directly. (example: "foo.example.com,bar.example.com")
 #
 ###
-FROM registry.access.redhat.com/ubi8/openjdk-11:1.11
+FROM registry.access.redhat.com/ubi8/openjdk-11:1.11@sha256:f6d4c974e9ea0848846f965d963cfc6f9b31d22f5c4fbf81a727c1ab6a811cc5
 
 ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en'
 

diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
@@ -13,7 +13,7 @@ services:
 
   azure-storage:
     container_name: 'azure-storage-quarkus'
-    image: mcr.microsoft.com/azure-storage/azurite
+    image: mcr.microsoft.com/azure-storage/azurite@sha256:d449d953a1c5bd1e26c800744a65c451e88f3387b696e02e3e2e79a995c3105b
     ports:
       - '10000:10000'
       - '10001:10001'

diff --git a/dockerOrigin/Dockerfile-local.native b/dockerOrigin/Dockerfile-local.native
@@ -15,7 +15,7 @@
 # docker build -f src/main/docker/Dockerfile.native -t quarkus/poc-quarkus-native:native-aarch64 .
 # docker run --rm -p 8080:8080 quarkus/poc-quarkus-native:local
 ###
-FROM ghcr.io/graalvm/graalvm-ce:ol7-java11-22.3.0-b2
+FROM ghcr.io/graalvm/graalvm-ce:ol7-java11-22.3.0-b2@sha256:49d1383ee58d48a8268ad5db80bd329687155811e9ff9f1af5047756e4a20f71
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

diff --git a/dockerOrigin/Dockerfile.graalbase b/dockerOrigin/Dockerfile.graalbase
@@ -1,6 +1,6 @@
 #docker build -f src/main/docker/Dockerfile.graalbase -t graalbase .
 
-FROM ghcr.io/graalvm/graalvm-ce:ol7-java11-22.3.0-b2 AS build
+FROM ghcr.io/graalvm/graalvm-ce:ol7-java11-22.3.0-b2@sha256:49d1383ee58d48a8268ad5db80bd329687155811e9ff9f1af5047756e4a20f71 AS build
 RUN gu install native-image
 WORKDIR /project
 VOLUME ["/project"]

diff --git a/dockerOrigin/Dockerfile.legacy-jar b/dockerOrigin/Dockerfile.legacy-jar
@@ -75,7 +75,7 @@
 #   accessed directly. (example: "foo.example.com,bar.example.com")
 #
 ###
-FROM registry.access.redhat.com/ubi8/openjdk-11:1.11
+FROM registry.access.redhat.com/ubi8/openjdk-11:1.11@sha256:f6d4c974e9ea0848846f965d963cfc6f9b31d22f5c4fbf81a727c1ab6a811cc5
 
 ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en'
 

diff --git a/dockerOrigin/Dockerfile.native b/dockerOrigin/Dockerfile.native
@@ -15,7 +15,7 @@
 # docker build -f docker/Dockerfile.native -t quarkus/poc-quarkus-native:native-aarch64 .
 # docker run --rm -p 8080:8080 quarkus/poc-quarkus-native:local
 ###
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5
+FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5@sha256:3f32ebba0cbf3849a48372d4fc3a4ce70816f248d39eb50da7ea5f15c7f9d120
 WORKDIR /work/
 RUN chown 1001 /work \
     && chmod "g+rwX" /work \

diff --git a/performance-test/docker-compose.yaml b/performance-test/docker-compose.yaml
@@ -1,7 +1,7 @@
 version: '3.3'
 services:
   k6:
-    image: grafana/k6
+    image: grafana/k6@sha256:278d78f2953041b6b4b0bd315e8605ed43222245771adc405f3252f3edea0eef
     container_name: k6
     volumes:
       - '${PWD}/src:/scripts'
@@ -15,7 +15,7 @@ services:
       - nginx
 
   nginx:
-    image: nginx
+    image: nginx@sha256:9c367186df9a6b18c6735357b8eb7f407347e84aea09beb184961cb83543d46e
     container_name: nginx
     volumes:
       - '${PWD}/nginx/nginx.conf:/etc/nginx/nginx.conf'