From: W. Felix Handte <w@felixhandte.com>
Date: Thu, 9 Mar 2023 22:01:22 +0000 (-0500)
Subject: Also Pin Dockerfile Dependency Hashes
X-Git-Tag: v1.5.5~2^2~30^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F3542%2Fhead;p=thirdparty%2Fzstd.git

Also Pin Dockerfile Dependency Hashes
---

diff --git a/.circleci/images/primary/Dockerfile b/.circleci/images/primary/Dockerfile
index bfcb6af69..4b77032b6 100644
--- a/.circleci/images/primary/Dockerfile
+++ b/.circleci/images/primary/Dockerfile
@@ -1,4 +1,4 @@
-FROM circleci/buildpack-deps:focal
+FROM circleci/buildpack-deps@sha256:f6f10c11b7b8ccfd4f4a5b830c3256803604ce61292b60cb22e26b12f62b0e8c
 
 RUN sudo dpkg --add-architecture i386
 RUN sudo apt-get -y -qq update
diff --git a/contrib/docker/Dockerfile b/contrib/docker/Dockerfile
index e06a32c0d..912bf1949 100644
--- a/contrib/docker/Dockerfile
+++ b/contrib/docker/Dockerfile
@@ -1,13 +1,13 @@
 # Dockerfile
 # First image to build the binary
-FROM alpine as builder
+FROM alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a as builder
 
 RUN apk --no-cache add make gcc libc-dev
 COPY . /src
 RUN mkdir /pkg && cd /src && make && make DESTDIR=/pkg install
 
 # Second minimal image to only keep the built binary
-FROM alpine
+FROM alpine@sha256:69665d02cb32192e52e07644d76bc6f25abeb5410edc1c7a81a10ba3f0efb90a
 
 # Copy the built files
 COPY --from=builder /pkg /