From 72803a12483ed6f4f7c34f804818169f50162e37 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 25 Sep 2024 18:27:33 +0000 Subject: [PATCH] :seedling: Bump the docker-images group across 1 directory with 2 updates (#1448) --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6d6eae3e..22cc08f4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,7 +22,7 @@ # -e GITHUB_REPOSITORY="ossf/scorecard" \ # laurentsimon/scorecard-action:latest -FROM golang:1.23.0@sha256:613a108a4a4b1dfb6923305db791a19d088f77632317cfc3446825c54fb862cd AS builder +FROM golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1 AS builder WORKDIR /src ENV CGO_ENABLED=0 COPY go.* ./ @@ -35,7 +35,7 @@ ARG TARGETARCH RUN CGO_ENABLED=0 make build # Need root for GitHub Actions support -FROM gcr.io/distroless/base@sha256:1aae189e3baecbb4044c648d356ddb75025b2ba8d14cdc9c2a19ba784c90bfb9 +FROM gcr.io/distroless/base@sha256:6ae5fe659f28c6afe9cc2903aebc78a5c6ad3aaa3d9d0369760ac6aaea2529c8 COPY --from=build /src/scorecard-action / COPY policies/template.yml /policy.yml ENTRYPOINT [ "/scorecard-action" ]