diff --git a/config/docker-compose-common-services.yaml b/config/docker-compose-common-services.yaml index 74dee2e..21401c7 100644 --- a/config/docker-compose-common-services.yaml +++ b/config/docker-compose-common-services.yaml @@ -4,7 +4,7 @@ services: cloud-agent: container_name: cloud-agent - image: index.docker.io/sourcegraph/src-tunnel-agent:latest + image: index.docker.io/sourcegraph/src-tunnel-agent:latest@sha256:ee0c603b48559e2d361023dac4b169773da80254dbd93d3e4dd5e14f50c0f93b volumes: - ../config/cloud-agent-service-account-key.json:/sourcegraph/cloud-agent-service-account-key.json:ro - ../config/cloud-agent-config.yaml:/sourcegraph/cloud-agent-config.yaml:ro @@ -16,7 +16,7 @@ services: src-serve-git: # Uses a valid hostname as container_name, to trick the cloud agent and code host config into finding this container on the Docker network container_name: src-serve-git-ubuntu.local - image: index.docker.io/sourcegraph/src-cli:latest + image: index.docker.io/sourcegraph/src-cli:latest@sha256:feab7bb2c40a613568093c133ef9e90ab37e040c0bfa98ec8b041ec842157592 volumes: - ../src-serve-root/:/sourcegraph/src-serve-root:ro command: "serve-git -addr :443 /sourcegraph/src-serve-root" diff --git a/repo-converter/build/Dockerfile b/repo-converter/build/Dockerfile index 1ea2d53..f0a41b2 100644 --- a/repo-converter/build/Dockerfile +++ b/repo-converter/build/Dockerfile @@ -1,11 +1,11 @@ -# syntax=docker/dockerfile:1 +# syntax=docker/dockerfile:1@sha256:db1ff77fb637a5955317c7a3a62540196396d565f3dd5742e76dddbb6d75c4c5 # Using version:1 means always getting the latest version of dockerfile syntax within major version 1 # https://docs.docker.com/build/dockerfile/frontend/#stable-channel # version:1 is still the most popular version # https://sourcegraph.com/search?q=context:global+%23+syntax%3Ddocker/dockerfile:(.*)&patternType=regexp&sm=0&expanded=&groupBy=group # Using Ubuntu LTS -FROM ubuntu:22.04 as base +FROM ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97 as base # Avoid stuck build due to user prompt ARG DEBIAN_FRONTEND=noninteractive diff --git a/repo-converter/docker-compose.yaml b/repo-converter/docker-compose.yaml index 9271e38..90aaf3f 100644 --- a/repo-converter/docker-compose.yaml +++ b/repo-converter/docker-compose.yaml @@ -9,7 +9,7 @@ services: repo-converter: container_name: repo-converter - image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest + image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest@sha256:5acfe53120ac4b34a7043c615998337e9e5b3cb94e89eca4faf45ed754b4c488 volumes: - ../config/repos-to-convert.yaml:/sourcegraph/repos-to-convert.yaml:ro - ../config/toprc:/root/.config/procps/toprc