Pin docker images to exact digest

open-telemetry · Sep 16, 2024 · b4248c7 · b4248c7
1 parent e856da4
commit b4248c7
Show file tree

Hide file tree

Showing 17 changed files with 19 additions and 17 deletions.
diff --git a/docker/alpine.dockerfile b/docker/alpine.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-alpine3.19
+FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-alpine3.19@sha256:812f0a548ddc0ffb80e2053ce3f04e01fd9d1944a40a04bfea242480e4ca5608
 RUN apk update \
     && apk upgrade \
     && apk add --no-cache --update \

diff --git a/docker/centos-build.dockerfile b/docker/centos-build.dockerfile
@@ -1,4 +1,4 @@
-FROM centos:centos7.9.2009
+FROM centos:centos7.9.2009@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
 
 RUN yum update -y \
     && yum -y install centos-release-scl-2-3.el7.centos \

diff --git a/docker/centos.dockerfile b/docker/centos.dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main
+FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main@sha256:84cdf59d27df38a84dc63f0e9fbb309651a778e5106e3f7e2aa79b7665a4832b
 
 RUN rpm -Uvh https://packages.microsoft.com/config/centos/7/packages-microsoft-prod.rpm
 RUN yum -y install dotnet-sdk-6.0-6.0.425-1 dotnet-sdk-7.0-7.0.410-1

diff --git a/docker/debian-arm64.dockerfile b/docker/debian-arm64.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-bookworm-slim@sha256:a364676fedc145cf88caad4bfb3cc372aae41e596c54e8a63900a2a1c8e364c6
 
 RUN apt-get update && \
     apt-get install -y \

diff --git a/docker/debian.dockerfile b/docker/debian.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.401-1-bookworm-slim@sha256:a364676fedc145cf88caad4bfb3cc372aae41e596c54e8a63900a2a1c8e364c6
 
 RUN wget https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -O packages-microsoft-prod.deb && \
     dpkg -i packages-microsoft-prod.deb && \

diff --git a/examples/demo/Dockerfile b/examples/demo/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-jammy@sha256:838644c2dd735cdf0ba3c6ec282b77bfea80039fb45fe41b70d2e026a1f30a12
 
 # install OpenTelemetry .NET Automatic Instrumentation
 ARG OTEL_VERSION=1.7.0

diff --git a/test/IntegrationTests/docker/azure.Dockerfile b/test/IntegrationTests/docker/azure.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/azure-storage/azurite:3.32.0
+FROM mcr.microsoft.com/azure-storage/azurite:3.32.0@sha256:47a392f1c93a6b639999fc505dcae348e350183b47f2a7526c765ddd7fa56e0e
diff --git a/test/IntegrationTests/docker/kafka.Dockerfile b/test/IntegrationTests/docker/kafka.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-kafka:7.7.0
+FROM confluentinc/cp-kafka:7.7.0@sha256:1fa3cdb3ef77b75bc56e7040bbdfa2bd6950b6ee6363381b2493f7a83e07a0b3
diff --git a/test/IntegrationTests/docker/mongodb.Dockerfile b/test/IntegrationTests/docker/mongodb.Dockerfile
@@ -1 +1 @@
-FROM mongo:5.0.28
+FROM mongo:5.0.28@sha256:fd08cf3c5aae3268a032a7064c60a4bc0fb468ee9a7b6b1b45b9b2335e4fda3e
diff --git a/test/IntegrationTests/docker/mysql.Dockerfile b/test/IntegrationTests/docker/mysql.Dockerfile
@@ -1 +1 @@
-FROM mysql:9.0.1
+FROM mysql:9.0.1@sha256:c69299937e5e2fc9a2cb26f5cd7a7151e48d9d5a3b3679f62bfd1275de698c0c
diff --git a/test/IntegrationTests/docker/oracle.Dockerfile b/test/IntegrationTests/docker/oracle.Dockerfile
@@ -1 +1 @@
-FROM gvenzl/oracle-free:23.3-slim-faststart
+FROM gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
diff --git a/test/IntegrationTests/docker/postgres.Dockerfile b/test/IntegrationTests/docker/postgres.Dockerfile
@@ -1 +1 @@
-FROM postgres:16.4
+FROM postgres:16.4@sha256:026d0ab72b34310b68160ab9299aa1add5544e4dc3243456b94f83cb1c119c2c
diff --git a/test/IntegrationTests/docker/redis.Dockerfile b/test/IntegrationTests/docker/redis.Dockerfile
@@ -1 +1 @@
-FROM redis:7.4.0
+FROM redis:7.4.0@sha256:eadf354977d428e347d93046bb1a5569d701e8deb68f090215534a99dbcb23b9
diff --git a/test/IntegrationTests/docker/sql-server.Dockerfile b/test/IntegrationTests/docker/sql-server.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04
+FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04@sha256:f54a84b8a802afdfa91a954e8ddfcec9973447ce8efec519adf593b54d49bedf
diff --git a/test/IntegrationTests/docker/zookeeper.Dockerfile b/test/IntegrationTests/docker/zookeeper.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-zookeeper:7.7.0
+FROM confluentinc/cp-zookeeper:7.7.0@sha256:d4312a5b61b45ab5c4d33d4c77e5a235cdd95a16dbfc1d381639520a2af48f01
diff --git a/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:4ad6f775ab425cf19af5c344750e3e259adce5a83f667ab1c9c2106e3e543cb7
+FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry

diff --git a/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:f0a51f6936f2211e51b5e3cb0b11851f400d6d9fcbf38b3382a596c217827a6c
+FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mcr.microsoft.com/azure-storage/azurite:3.32.0
		FROM mcr.microsoft.com/azure-storage/azurite:3.32.0@sha256:47a392f1c93a6b639999fc505dcae348e350183b47f2a7526c765ddd7fa56e0e
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM confluentinc/cp-kafka:7.7.0
		FROM confluentinc/cp-kafka:7.7.0@sha256:1fa3cdb3ef77b75bc56e7040bbdfa2bd6950b6ee6363381b2493f7a83e07a0b3
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mongo:5.0.28
		FROM mongo:5.0.28@sha256:fd08cf3c5aae3268a032a7064c60a4bc0fb468ee9a7b6b1b45b9b2335e4fda3e
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mysql:9.0.1
		FROM mysql:9.0.1@sha256:c69299937e5e2fc9a2cb26f5cd7a7151e48d9d5a3b3679f62bfd1275de698c0c
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM gvenzl/oracle-free:23.3-slim-faststart
		FROM gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM postgres:16.4
		FROM postgres:16.4@sha256:026d0ab72b34310b68160ab9299aa1add5544e4dc3243456b94f83cb1c119c2c
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM redis:7.4.0
		FROM redis:7.4.0@sha256:eadf354977d428e347d93046bb1a5569d701e8deb68f090215534a99dbcb23b9
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04
		FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04@sha256:f54a84b8a802afdfa91a954e8ddfcec9973447ce8efec519adf593b54d49bedf
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM confluentinc/cp-zookeeper:7.7.0
		FROM confluentinc/cp-zookeeper:7.7.0@sha256:d4312a5b61b45ab5c4d33d4c77e5a235cdd95a16dbfc1d381639520a2af48f01