Pin docker images to exact digest

Kielek · Kielek · commit a26f1d900462 · 2024-11-04T09:35:34.000+01:00
diff --git a/docker/alpine.dockerfile b/docker/alpine.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.403-alpine3.20
+FROM mcr.microsoft.com/dotnet/sdk:8.0.403-alpine3.20@sha256:07cb8622ca6c4d7600b42b2eccba968dff4b37d41b43a9bf4bd800aa02fab117
 RUN apk update \
     && apk upgrade \
     && apk add --no-cache --update \
diff --git a/docker/centos-build.dockerfile b/docker/centos-build.dockerfile
@@ -1,4 +1,4 @@
-FROM centos:centos7.9.2009
+FROM centos:centos7.9.2009@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
 
 RUN yum update -y \
     && yum -y install centos-release-scl-2-3.el7.centos \
diff --git a/docker/centos.dockerfile b/docker/centos.dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main
+FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main@sha256:84cdf59d27df38a84dc63f0e9fbb309651a778e5106e3f7e2aa79b7665a4832b
 
 RUN rpm -Uvh https://packages.microsoft.com/config/centos/7/packages-microsoft-prod.rpm
 RUN yum -y install dotnet-sdk-6.0-6.0.427-1 dotnet-sdk-7.0-7.0.410-1
diff --git a/docker/debian-arm64.dockerfile b/docker/debian-arm64.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.403-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.403-bookworm-slim@sha256:cab0284cce7bc26d41055d0ac5859a69a8b75d9a201cd226999f4f00cc983f13
 
 RUN apt-get update && \
     apt-get install -y \
diff --git a/docker/debian.dockerfile b/docker/debian.dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0.403-bookworm-slim
+FROM mcr.microsoft.com/dotnet/sdk:8.0.403-bookworm-slim@sha256:cab0284cce7bc26d41055d0ac5859a69a8b75d9a201cd226999f4f00cc983f13
 
 RUN wget https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb -O packages-microsoft-prod.deb && \
     dpkg -i packages-microsoft-prod.deb && \
diff --git a/examples/demo/Dockerfile b/examples/demo/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy
+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-jammy@sha256:838644c2dd735cdf0ba3c6ec282b77bfea80039fb45fe41b70d2e026a1f30a12
 
 # install OpenTelemetry .NET Automatic Instrumentation
 ARG OTEL_VERSION=1.8.0
diff --git a/test/IntegrationTests/docker/azure.Dockerfile b/test/IntegrationTests/docker/azure.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/azure-storage/azurite:3.33.0
+FROM mcr.microsoft.com/azure-storage/azurite:3.33.0@sha256:2628ee10a72833cc344b9d194cd8b245543892b307d16cf26a2cf55a15b816af
diff --git a/test/IntegrationTests/docker/kafka.Dockerfile b/test/IntegrationTests/docker/kafka.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-kafka:7.7.1
+FROM confluentinc/cp-kafka:7.7.1@sha256:653f49c51cfebcf8301938d01044efead6afbd8dd60acd2bcf1605d7c6494d3b
diff --git a/test/IntegrationTests/docker/mongodb.Dockerfile b/test/IntegrationTests/docker/mongodb.Dockerfile
@@ -1 +1 @@
-FROM mongo:8.0.3
+FROM mongo:8.0.3@sha256:3984cf5a234e525253619060fcbff12449db0597d62a6d4e18991a18f2365c36
diff --git a/test/IntegrationTests/docker/mysql.Dockerfile b/test/IntegrationTests/docker/mysql.Dockerfile
@@ -1 +1 @@
-FROM mysql:9.1.0
+FROM mysql:9.1.0@sha256:fd8d1b4e287c49e1e35eb5a103f337111947662130eb8a3e6c3e823813f47f7d
diff --git a/test/IntegrationTests/docker/oracle.Dockerfile b/test/IntegrationTests/docker/oracle.Dockerfile
@@ -1 +1 @@
-﻿FROM gvenzl/oracle-free:23.3-slim-faststart
+﻿FROM gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
diff --git a/test/IntegrationTests/docker/postgres.Dockerfile b/test/IntegrationTests/docker/postgres.Dockerfile
@@ -1 +1 @@
-FROM postgres:17.0
+FROM postgres:17.0sha256:8d3be35b184e70d81e54cbcbd3df3c0b47f37d06482c0dd1c140db5dbcc6a808
diff --git a/test/IntegrationTests/docker/redis.Dockerfile b/test/IntegrationTests/docker/redis.Dockerfile
@@ -1 +1 @@
-FROM redis:7.4.1
+FROM redis:7.4.0@sha256:a06cea905344470eb49c972f3d030e22f28f632c1b4f43bbe4a26a4329dd6be5
diff --git a/test/IntegrationTests/docker/sql-server.Dockerfile b/test/IntegrationTests/docker/sql-server.Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/mssql/server:2019-CU28-ubuntu-20.04
+FROM mcr.microsoft.com/mssql/server:2019-CU28-ubuntu-20.04@sha256:d7f2c670f0cd807b4dc466b8887bd2b39a4561f624c154896f5564ea38efd13a
diff --git a/test/IntegrationTests/docker/zookeeper.Dockerfile b/test/IntegrationTests/docker/zookeeper.Dockerfile
@@ -1 +1 @@
-FROM confluentinc/cp-zookeeper:7.7.1
+FROM confluentinc/cp-zookeeper:7.7.1@sha256:86bfe47cc8b55e290bbe21c156e99ac3859df7a1dea66379e43a137d32e80ea3
diff --git a/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.AspNet.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:4ad6f775ab425cf19af5c344750e3e259adce5a83f667ab1c9c2106e3e543cb7
+FROM mcr.microsoft.com/dotnet/framework/aspnet:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry
diff --git a/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile b/test/test-applications/integrations/TestApplication.Wcf.Server.IIS.NetFramework/Dockerfile
@@ -1,7 +1,8 @@
 # escape=`
 
 ARG windowscontainer_version=ltsc2022
-FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}
+ARG image_digest=sha256:f0a51f6936f2211e51b5e3cb0b11851f400d6d9fcbf38b3382a596c217827a6c
+FROM mcr.microsoft.com/dotnet/framework/wcf:4.8-windowsservercore-${windowscontainer_version}@${image_digest}
 ARG configuration=Debug
 ARG platform=x64
 WORKDIR /opentelemetry

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM mcr.microsoft.com/dotnet/sdk:8.0.403-alpine3.20`
	`1`	`+FROM mcr.microsoft.com/dotnet/sdk:8.0.403-alpine3.20@sha256:07cb8622ca6c4d7600b42b2eccba968dff4b37d41b43a9bf4bd800aa02fab117`
`2`	`2`	`RUN apk update \`
`3`	`3`	`&& apk upgrade \`
`4`	`4`	`&& apk add --no-cache --update \`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM centos:centos7.9.2009`
	`1`	`+FROM centos:centos7.9.2009@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4`
`2`	`2`
`3`	`3`	`RUN yum update -y \`
`4`	`4`	`&& yum -y install centos-release-scl-2-3.el7.centos \`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main`
	`1`	`+FROM ghcr.io/open-telemetry/opentelemetry-dotnet-instrumentation-centos7-build-image:main@sha256:84cdf59d27df38a84dc63f0e9fbb309651a778e5106e3f7e2aa79b7665a4832b`
`2`	`2`
`3`	`3`	`RUN rpm -Uvh https://packages.microsoft.com/config/centos/7/packages-microsoft-prod.rpm`
`4`	`4`	`RUN yum -y install dotnet-sdk-6.0-6.0.427-1 dotnet-sdk-7.0-7.0.410-1`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy`
	`1`	`+FROM mcr.microsoft.com/dotnet/sdk:8.0.302-jammy@sha256:838644c2dd735cdf0ba3c6ec282b77bfea80039fb45fe41b70d2e026a1f30a12`
`2`	`2`
`3`	`3`	`# install OpenTelemetry .NET Automatic Instrumentation`
`4`	`4`	`ARG OTEL_VERSION=1.8.0`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM mcr.microsoft.com/azure-storage/azurite:3.33.0`
	`1`	`+FROM mcr.microsoft.com/azure-storage/azurite:3.33.0@sha256:2628ee10a72833cc344b9d194cd8b245543892b307d16cf26a2cf55a15b816af`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM confluentinc/cp-kafka:7.7.1`
	`1`	`+FROM confluentinc/cp-kafka:7.7.1@sha256:653f49c51cfebcf8301938d01044efead6afbd8dd60acd2bcf1605d7c6494d3b`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM mongo:8.0.3`
	`1`	`+FROM mongo:8.0.3@sha256:3984cf5a234e525253619060fcbff12449db0597d62a6d4e18991a18f2365c36`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM mysql:9.1.0`
	`1`	`+FROM mysql:9.1.0@sha256:fd8d1b4e287c49e1e35eb5a103f337111947662130eb8a3e6c3e823813f47f7d`