From 37a115145eca5ade86705d5e194d180a765dc523 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 15:01:45 -0400 Subject: [PATCH] Update images digests (#31305) Update images digests ```release-note NONE ``` Co-authored-by: octo-sts[bot] <157150467+octo-sts[bot]@users.noreply.github.com> --- .github/actions/docker-run/action.yaml | 2 +- .github/workflows/build.yaml | 6 +++--- Makefile | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/actions/docker-run/action.yaml b/.github/actions/docker-run/action.yaml index ce2473c5f75..5a55a35aef4 100644 --- a/.github/actions/docker-run/action.yaml +++ b/.github/actions/docker-run/action.yaml @@ -6,7 +6,7 @@ inputs: required: true image: description: "The image to use" - default: "ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420" + default: "ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5" required: false workdir: description: "The images working directory" diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index baa5d9a8b64..b203440919d 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -29,7 +29,7 @@ jobs: contents: read container: - image: ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420 + image: ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5 # TODO: Deprivilege options: | --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined @@ -175,7 +175,7 @@ jobs: container: # NOTE: This step only signs and uploads, so it doesn't need any privileges - image: ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420 + image: ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5 steps: - name: Harden Runner @@ -303,7 +303,7 @@ jobs: container: # NOTE: This step only signs and uploads, so it doesn't need any privileges - image: ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420 + image: ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5 steps: - name: Harden Runner diff --git a/Makefile b/Makefile index 6b775225dca..fdae309efc1 100644 --- a/Makefile +++ b/Makefile @@ -156,7 +156,7 @@ dev-container: -v "${PWD}:${PWD}" \ -w "${PWD}" \ -e SOURCE_DATE_EPOCH=0 \ - ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420 + ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5 PACKAGES_CONTAINER_FOLDER ?= /work/packages # This target spins up a docker container that is helpful for testing local @@ -223,6 +223,6 @@ dev-container-wolfi: --mount type=bind,source="${PWD}/local-melange.rsa.pub",destination="/etc/apk/keys/local-melange.rsa.pub",readonly \ --mount type=bind,source="$(TMP_REPOS_FILE)",destination="/etc/apk/repositories",readonly \ -w "$(PACKAGES_CONTAINER_FOLDER)" \ - ghcr.io/wolfi-dev/sdk:latest@sha256:1674addbde81a3228d19516119c48e2b55ec41159383d3cd4d8b76be6d316420 + ghcr.io/wolfi-dev/sdk:latest@sha256:7c79f355639dd700b05e8b96bf09ff77f0f0f387456bd00995b11e99df07c6f5 @rm "$(TMP_REPOS_FILE)" @rmdir "$(TMP_REPOS_DIR)"