Pin docker images to exact digest

open-telemetry · Jul 16, 2024 · a02bec5 · a02bec5
1 parent 100a667
commit a02bec5
Show file tree

Hide file tree

Showing 17 changed files with 19 additions and 17 deletions.
diff --git a/docker/alpine.dockerfile b/docker/alpine.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-alpine3.19
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-alpine3.19@sha256:e9f2d4a0452e823d615bf6da6e0575489d8037498571db6fa1c6ce6fb9987ecd
 RUN apk update \
     && apk upgrade \
     && apk add --no-cache --update \

diff --git a/docker/centos-build.dockerfile b/docker/centos-build.dockerfile
@@ -1,4 +1,4 @@
-FROM centos:centos7.9.2009
+FROM centos:centos7.9.2009@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
 
 RUN yum update -y \
     && yum -y install centos-release-scl-2-3.el7.centos \

diff --git a/docker/centos.dockerfile b/docker/centos.dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main
+FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main@sha256:84cdf59d27df38a84dc63f0e9fbb309651a778e5106e3f7e2aa79b7665a4832b
 
 RUN rpm -Uvh https://packages.microsoft.com/config/centos/7/packages-microsoft-prod.rpm
 RUN yum -y install dotnet-sdk-6.0-6.0.423-1 dotnet-sdk-7.0-7.0.410-1

diff --git a/docker/debian-arm64.dockerfile b/docker/debian-arm64.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-bookworm-slim@sha256:3bc4c8f13482237ab906d38dd9e290b4b1a093a2653ab3c28cca710b46510b9d
 
 RUN apt-get update && \
     apt-get install -y \

diff --git a/docker/debian.dockerfile b/docker/debian.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-1-bookworm-slim@sha256:3bc4c8f13482237ab906d38dd9e290b4b1a093a2653ab3c28cca710b46510b9d
 
 RUN wget https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -O packages-microsoft-prod.deb && \
     dpkg -i packages-microsoft-prod.deb && \

diff --git a/examples/demo/Dockerfile b/examples/demo/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-jammy@sha256:838644c2dd735cdf0ba3c6ec282b77bfea80039fb45fe41b70d2e026a1f30a12
 
 # install OpenTelemetry .NET Automatic Instrumentation
 ARG OTEL_VERSION=1.7.0

diff --git a/test/IntegrationTests/docker/azure.Dockerfile b/test/IntegrationTests/docker/azure.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/azure-storage/azurite:3.31.0
+FROM mcr.microsoft.com/azure-storage/azurite:3.31.0@sha256:d449d953a1c5bd1e26c800744a65c451e88f3387b696e02e3e2e79a995c3105b
diff --git a/test/IntegrationTests/docker/kafka.Dockerfile b/test/IntegrationTests/docker/kafka.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-kafka:7.6.1
+FROM confluentinc/cp-kafka:7.6.1@sha256:620734d9fc0bb1f9886932e5baf33806074469f40e3fe246a3fdbb59309535fa
diff --git a/test/IntegrationTests/docker/mongodb.Dockerfile b/test/IntegrationTests/docker/mongodb.Dockerfile
@@ -1 +1 @@
-FROM mongo:5.0.27
+FROM mongo:5.0.27@sha256:8b98d055e48a41bbf9e998113941073662700aef20d18348f5255afdde792070
diff --git a/test/IntegrationTests/docker/mysql.Dockerfile b/test/IntegrationTests/docker/mysql.Dockerfile
@@ -1 +1 @@
-FROM mysql:9.0.0
+FROM mysql:9.0.0@sha256:72a37ddc9f839cfd84f1f6815fb31ba26f37f4c200b90e49607797480e3be446
diff --git a/test/IntegrationTests/docker/oracle.Dockerfile b/test/IntegrationTests/docker/oracle.Dockerfile
@@ -1 +1 @@
-FROM gvenzl/oracle-free:23.3-slim-faststart
+FROM gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
diff --git a/test/IntegrationTests/docker/postgres.Dockerfile b/test/IntegrationTests/docker/postgres.Dockerfile
@@ -1 +1 @@
-FROM postgres:16.3
+FROM postgres:16.3@sha256:6d2a810d24786a90bf4bf2f4d4ce7a1039696a9269f3293abf3d6c8aa0bab9da
diff --git a/test/IntegrationTests/docker/redis.Dockerfile b/test/IntegrationTests/docker/redis.Dockerfile
@@ -1 +1 @@
-FROM redis:7.2.5
+FROM redis:7.2.5@sha256:9373d3b1e76c89e4cef0242152aa1b18507338058777b96e055fb2b20c63ce9b
diff --git a/test/IntegrationTests/docker/sql-server.Dockerfile b/test/IntegrationTests/docker/sql-server.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04
+FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04@sha256:f54a84b8a802afdfa91a954e8ddfcec9973447ce8efec519adf593b54d49bedf
diff --git a/test/IntegrationTests/docker/zookeeper.Dockerfile b/test/IntegrationTests/docker/zookeeper.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-zookeeper:7.6.1
+FROM confluentinc/cp-zookeeper:7.6.1@sha256:4dc780642bfc5ec3a2d4901e2ff1f9ddef7f7c5c0b793e1e2911cbfb4e3a3214
diff --git a/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:4ad6f775ab425cf19af5c344750e3e259adce5a83f667ab1c9c2106e3e543cb7
+FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry

diff --git a/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:f0a51f6936f2211e51b5e3cb0b11851f400d6d9fcbf38b3382a596c217827a6c
+FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mcr.microsoft.com/azure-storage/azurite:3.31.0
		FROM mcr.microsoft.com/azure-storage/azurite:3.31.0@sha256:d449d953a1c5bd1e26c800744a65c451e88f3387b696e02e3e2e79a995c3105b
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM confluentinc/cp-kafka:7.6.1
		FROM confluentinc/cp-kafka:7.6.1@sha256:620734d9fc0bb1f9886932e5baf33806074469f40e3fe246a3fdbb59309535fa
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mongo:5.0.27
		FROM mongo:5.0.27@sha256:8b98d055e48a41bbf9e998113941073662700aef20d18348f5255afdde792070
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mysql:9.0.0
		FROM mysql:9.0.0@sha256:72a37ddc9f839cfd84f1f6815fb31ba26f37f4c200b90e49607797480e3be446
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM gvenzl/oracle-free:23.3-slim-faststart
		FROM gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM postgres:16.3
		FROM postgres:16.3@sha256:6d2a810d24786a90bf4bf2f4d4ce7a1039696a9269f3293abf3d6c8aa0bab9da
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM redis:7.2.5
		FROM redis:7.2.5@sha256:9373d3b1e76c89e4cef0242152aa1b18507338058777b96e055fb2b20c63ce9b
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04
		FROM mcr.microsoft.com/mssql/server:2019-CU17-ubuntu-20.04@sha256:f54a84b8a802afdfa91a954e8ddfcec9973447ce8efec519adf593b54d49bedf
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		FROM confluentinc/cp-zookeeper:7.6.1
		FROM confluentinc/cp-zookeeper:7.6.1@sha256:4dc780642bfc5ec3a2d4901e2ff1f9ddef7f7c5c0b793e1e2911cbfb4e3a3214