From f98c18f12722a189d8d5611e716514217176320e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Feb 2024 22:46:40 +0000 Subject: [PATCH] :seedling: Bump the docker-images group with 2 updates Bumps the docker-images group with 2 updates: golang and distroless/base. Updates `golang` from 1.21.6 to 1.22.0 Updates `distroless/base` from `6c1e34e` to `9d4e568` --- updated-dependencies: - dependency-name: golang dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-images - dependency-name: distroless/base dependency-type: direct:production dependency-group: docker-images ... Signed-off-by: dependabot[bot] --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 89e02577..5262f76f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,7 +22,7 @@ # -e GITHUB_REPOSITORY="ossf/scorecard" \ # laurentsimon/scorecard-action:latest -FROM golang:1.21.6@sha256:7b575fe0d9c2e01553b04d9de8ffea6d35ca3ab3380d2a8db2acc8f0f1519a53 AS builder +FROM golang:1.22.0@sha256:ef61a20960397f4d44b0e729298bf02327ca94f1519239ddc6d91689615b1367 AS builder WORKDIR /src ENV CGO_ENABLED=0 COPY go.* ./ @@ -35,7 +35,7 @@ ARG TARGETARCH RUN CGO_ENABLED=0 make build # Need root for GitHub Actions support -FROM gcr.io/distroless/base@sha256:6c1e34e2f084fe6df17b8bceb1416f1e11af0fcdb1cef11ee4ac8ae127cb507c +FROM gcr.io/distroless/base@sha256:9d4e5680d67c984ac9c957f66405de25634012e2d5d6dc396c4bdd2ba6ae569f COPY --from=build /src/scorecard-action / COPY policies/template.yml /policy.yml ENTRYPOINT [ "/scorecard-action" ]