Skip to content

Commit

Permalink
🌱 Bump the docker-images group with 2 updates
Browse files Browse the repository at this point in the history
Bumps the docker-images group with 2 updates: golang and distroless/base.


Updates `golang` from 1.21.6 to 1.22.0

Updates `distroless/base` from `6c1e34e` to `9d4e568`

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker-images
- dependency-name: distroless/base
  dependency-type: direct:production
  dependency-group: docker-images
...

Signed-off-by: dependabot[bot] <[email protected]>
  • Loading branch information
dependabot[bot] authored Feb 12, 2024
1 parent 0ae0fb3 commit b5142b0
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
# -e GITHUB_REPOSITORY="ossf/scorecard" \
# laurentsimon/scorecard-action:latest

FROM golang:1.21.6@sha256:7b575fe0d9c2e01553b04d9de8ffea6d35ca3ab3380d2a8db2acc8f0f1519a53 AS builder
FROM golang:1.22.0@sha256:ef61a20960397f4d44b0e729298bf02327ca94f1519239ddc6d91689615b1367 AS builder
WORKDIR /src
ENV CGO_ENABLED=0
COPY go.* ./
Expand All @@ -35,7 +35,7 @@ ARG TARGETARCH
RUN CGO_ENABLED=0 make build

# Need root for GitHub Actions support
FROM gcr.io/distroless/base@sha256:6c1e34e2f084fe6df17b8bceb1416f1e11af0fcdb1cef11ee4ac8ae127cb507c
FROM gcr.io/distroless/base@sha256:9d4e5680d67c984ac9c957f66405de25634012e2d5d6dc396c4bdd2ba6ae569f
COPY --from=build /src/scorecard-action /
COPY policies/template.yml /policy.yml
ENTRYPOINT [ "/scorecard-action" ]

0 comments on commit b5142b0

Please sign in to comment.