Also Pin Dockerfile Dependency Hashes

diff --git a/.circleci/images/primary/Dockerfile b/.circleci/images/primary/Dockerfile
index bfcb6af6917e8f8a233e0497d2e8694308c8b9b4..4b77032b6dd945527a00b04ae2fa238d68ff202f 100644 (file)
--- a/.circleci/images/primary/Dockerfile
+++ b/.circleci/images/primary/Dockerfile
@@ -1,4 +1,4 @@
-FROM circleci/buildpack-deps:focal
+FROM circleci/buildpack-deps@sha256:f6f10c11b7b8ccfd4f4a5b830c3256803604ce61292b60cb22e26b12f62b0e8c
 
 RUN sudo dpkg --add-architecture i386
 RUN sudo apt-get -y -qq update

diff --git a/contrib/docker/Dockerfile b/contrib/docker/Dockerfile
index e06a32c0dac7b5039d95f2fc1a6a35f13b144558..912bf1949778987f26ec7de9b90546c035439d83 100644 (file)
--- a/contrib/docker/Dockerfile
+++ b/contrib/docker/Dockerfile
@@ -1,13 +1,13 @@
 # Dockerfile
 # First image to build the binary
-FROM alpine as builder
+FROM alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a as builder
 
 RUN apk --no-cache add make gcc libc-dev
 COPY . /src
 RUN mkdir /pkg && cd /src && make && make DESTDIR=/pkg install
 
 # Second minimal image to only keep the built binary
-FROM alpine
+FROM alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a
 
 # Copy the built files
 COPY --from=builder /pkg /