build: pin base docker image by sha256 digest

jtobin · jtobin · commit a25fc5457049 · 2025-12-02T16:06:08.000+04:00
Since 5878cb1, this image is used to build release artifacts, so pinning it by digest is good paranoia practice.
diff --git a/make/builder.Dockerfile b/make/builder.Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.24.9-bookworm
+FROM golang:1.24.9-bookworm@sha256:737b40b61ce956d738bed59f18ba854d8d67e7a4c4fa63f64437f4c70247ac5b
 
 MAINTAINER Olaoluwa Osuntokun <laolu@lightning.engineering>
 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM golang:1.24.9-bookworm`
	`1`	`+FROM golang:1.24.9-bookworm@sha256:737b40b61ce956d738bed59f18ba854d8d67e7a4c4fa63f64437f4c70247ac5b`
`2`	`2`
`3`	`3`	`MAINTAINER Olaoluwa Osuntokun <laolu@lightning.engineering>`
`4`	`4`