security: add commit hash to docker file (#5090)

* security: add commit hash to docker file Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * Update dependabot.yml Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * Update release_linux_aarch64.yml Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * Update release_linux_aarch64.yml Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * Update release_linux_aarch64.yml Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * Update .github/workflows/release_linux_aarch64.yml Co-authored-by: Chun-Wei Chen <jacky82226@gmail.com> Signed-off-by: Andreas Fehlner <fehlner@arcor.de> * update Signed-off-by: Andreas Fehlner <fehlner@arcor.de> --------- Signed-off-by: Andreas Fehlner <fehlner@arcor.de> Co-authored-by: Chun-Wei Chen <jacky82226@gmail.com>
onnx · Apr 21, 2023 · 10fb80b · 10fb80b
1 parent 159a159
commit 10fb80b
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -26,4 +26,14 @@ updates:
     labels:
       - "dependencies"
       - "github_actions"
+      - "run release CIs"      
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
       - "run release CIs"
+
diff --git a/.github/workflows/release_linux_x86_64.yml b/.github/workflows/release_linux_x86_64.yml
@@ -43,7 +43,7 @@ jobs:
         python -m pip install -q -r requirements-release.txt
 
     - name: Build manylinux2014_x86_64
-      uses: docker://quay.io/pypa/manylinux2014_x86_64
+      uses: docker://quay.io/pypa/manylinux2014_x86_64:latest@sha256:085b7c2c1bcb45b936e5478fe24a5142b0519e242a0104142fd50d569d6cb922
       with:
         entrypoint: bash
         args: .github/workflows/manylinux/entrypoint.sh ${{ matrix.python-version }} manylinux2014_x86_64 ${{ github.event_name }}