Merge pull request #1267 from Nordix/tuomo/pin-distroless

🌱 pin distroless to static:nonroot with sha digest
metal3-io · May 3, 2023 · b76dde2 · b76dde2
2 parents 945aa3e + 23f6e1b
commit b76dde2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,6 @@
 # Support FROM override
 ARG BUILD_IMAGE=docker.io/golang:1.19.6@sha256:7ce31d15a3a4dbf20446cccffa4020d3a2974ad2287d96123f55caf22c7adb71
-ARG BASE_IMAGE=gcr.io/distroless/base:latest
+ARG BASE_IMAGE=gcr.io/distroless/static@sha256:9ecc53c269509f63c69a266168e4a687c7eb8c0cfd753bd8bfcaa4f58a90876f  # nonroot
 
 # Build the manager binary
 FROM $BUILD_IMAGE AS builder