diff --git a/CHANGELOG.md b/CHANGELOG.md index ae9b4eea99..8a4f6cbf7a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -22,6 +22,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] +### Changed + +- Resolves [#4301](https://github.com/microsoft/BotFramework-WebChat/issues/4301). Updated `Dockerfile` to support secure container supply chain, by [@compulim](https://github.com/compulim) in PR [#4303](https://github.com/microsoft/BotFramework-WebChat/pull/4303) + ## [4.15.2] - 2022-05-09 ### Breaking changes diff --git a/packages/test/harness/Dockerfile b/packages/test/harness/Dockerfile index 373c04d7ef..75cf45297e 100644 --- a/packages/test/harness/Dockerfile +++ b/packages/test/harness/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18-alpine -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18-alpine FROM $BASE_IMAGE diff --git a/playground.dockerfile b/playground.dockerfile index f703497b3c..4bc431580c 100644 --- a/playground.dockerfile +++ b/playground.dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18-alpine -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18-alpine FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile b/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile index 6fcbfc17f1..4d1c369efd 100644 --- a/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile +++ b/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This container is for simplifying CI when using Azure Pipelines diff --git a/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile-run b/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile-run index 9168d8f6a4..4c8926d7bb 100644 --- a/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile-run +++ b/samples/07.advanced-web-chat-apps/a.upload-to-azure-storage/Dockerfile-run @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This is the container for running the demo under Azure Web App FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile b/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile index 6a491ed8c6..14d00cd1f8 100644 --- a/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile +++ b/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This container is for simplifying CI when using Azure Pipelines diff --git a/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile-run b/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile-run index 9168d8f6a4..4c8926d7bb 100644 --- a/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile-run +++ b/samples/07.advanced-web-chat-apps/b.sso-for-enterprise/Dockerfile-run @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This is the container for running the demo under Azure Web App FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile b/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile index a93fa4d83a..d219fbc763 100644 --- a/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile +++ b/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This container is for simplifying CI when using Azure Pipelines FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile-run b/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile-run index 9168d8f6a4..4c8926d7bb 100644 --- a/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile-run +++ b/samples/07.advanced-web-chat-apps/c.sso-for-intranet/Dockerfile-run @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This is the container for running the demo under Azure Web App FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile b/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile index a93fa4d83a..d219fbc763 100644 --- a/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile +++ b/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This container is for simplifying CI when using Azure Pipelines FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile-run b/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile-run index 9168d8f6a4..4c8926d7bb 100644 --- a/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile-run +++ b/samples/07.advanced-web-chat-apps/d.sso-for-teams/Dockerfile-run @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This is the container for running the demo under Azure Web App FROM $BASE_IMAGE diff --git a/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile b/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile index 6a491ed8c6..14d00cd1f8 100644 --- a/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile +++ b/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This container is for simplifying CI when using Azure Pipelines diff --git a/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile-run b/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile-run index 9168d8f6a4..4c8926d7bb 100644 --- a/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile-run +++ b/samples/07.advanced-web-chat-apps/e.sso-on-behalf-of-authentication/Dockerfile-run @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18 -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18 # This is the container for running the demo under Azure Web App FROM $BASE_IMAGE diff --git a/testharness.dockerfile b/testharness.dockerfile index 49bce695ae..19034467df 100644 --- a/testharness.dockerfile +++ b/testharness.dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18-alpine -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18-alpine FROM $BASE_IMAGE diff --git a/testharness2.dockerfile b/testharness2.dockerfile index 9756e0cbfe..2272c68fab 100644 --- a/testharness2.dockerfile +++ b/testharness2.dockerfile @@ -1,7 +1,5 @@ # Setting to a different base image to secure your container supply chain. -ARG REGISTRY=docker.io -ARG IMAGE_VERSION=18-alpine -ARG BASE_IMAGE=$REGISTRY/node:$IMAGE_VERSION +ARG BASE_IMAGE=node:18-alpine FROM $BASE_IMAGE