Skip to content

Commit

Permalink
fix(godpu): update dockerfile for new alpine and golang versions
Browse files Browse the repository at this point in the history
Signed-off-by: Mark Sanders <marksanders194@gmail.com>
  • Loading branch information
sandersms committed Jan 8, 2025
1 parent cdd8ef2 commit f59fbf6
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# SPDX-License-Identifier: Apache-2.0
# Copyright (c) 2022-2023 Dell Inc, or its subsidiaries.
FROM docker.io/library/golang:1.21.5-alpine3.17 as builder
FROM docker.io/library/golang:1.23.4-alpine3.21 as builder

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: containerImage not pinned by hash
Click Remediation section below to solve this issue

WORKDIR /app

Expand All @@ -15,7 +15,7 @@ ENV CGO_ENABLED=0
COPY . .
RUN go build -v -o /dpu .

FROM alpine:3.19
FROM alpine:3.21

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: containerImage not pinned by hash
Remediation tip: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Click Remediation section below for further remediation help

WORKDIR /

Expand Down

0 comments on commit f59fbf6

Please sign in to comment.