Merge pull request #1 from ElenaCouto/atomist/pin-docker-base-image/s…

…parkjava/sparkjava/dockerfile Atomist/pin docker base image/sparkjava/sparkjava/dockerfile
ElenaCouto · Nov 21, 2024 · 2f62411 · 2f62411
2 parents e6b1d27 + 518dd44
commit 2f62411
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/sparkjava/sparkjava/Dockerfile b/sparkjava/sparkjava/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.4
 
-FROM --platform=$BUILDPLATFORM maven:3.8.5-eclipse-temurin-17 AS build
+FROM --platform=$BUILDPLATFORM maven:3.8.5-eclipse-temurin-17@sha256:a554849fd74b733acb76379bd7df0ea26635a48ab9b54ede1e94bbeaaf448cf6 AS build
 WORKDIR /workdir/server
 COPY pom.xml /workdir/server/pom.xml
 RUN mvn dependency:go-offline
@@ -24,7 +24,7 @@ EOF
 COPY --from=gloursdocker/docker / /
 CMD ["java", "-jar", "target/app.jar" ]
 
-FROM eclipse-temurin:17-jre-focal
+FROM eclipse-temurin:17-jre-focal@sha256:55c1ff40a91898c456dc5a874a66db17b6aa1b4aef8d9cac1ad3b194575638a1
 ARG DEPENDENCY=/workdir/server/target
 EXPOSE 8080
 COPY --from=build ${DEPENDENCY}/app.jar /app.jar