diff --git a/Dockerfile b/Dockerfile index 10faa7aa5..8affaf5de 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder +FROM golang:1.26.5@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT @@ -31,7 +31,7 @@ RUN CGO_ENABLED=0 go build -gcflags "all=-N -l" -ldflags "${SERVER_LDFLAGS}" -o RUN go test -c -ldflags "${SERVER_LDFLAGS}" -cover -covermode=count -coverpkg=./... -o rekor-server_test ./cmd/rekor-server # Multi-Stage production build -FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS deploy +FROM golang:1.26.5@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/rekor-server /usr/local/bin/rekor-server diff --git a/Dockerfile.backfill-redis.rh b/Dockerfile.backfill-redis.rh index a1ddd064e..cf3b32f9e 100644 --- a/Dockerfile.backfill-redis.rh +++ b/Dockerfile.backfill-redis.rh @@ -1,6 +1,6 @@ # Build stage -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784751462@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS build-env ENV CGO_ENABLED=0 ENV GOFLAGS="-tags=no_openssl" @@ -20,7 +20,7 @@ ARG SERVER_LDFLAGS RUN go build -mod=readonly -trimpath -ldflags "$(SERVER_LDFLAGS)" -o backfill-redis ./cmd/backfill-index # Install stage -FROM registry.redhat.io/rhel9/redis-6@sha256:336839f22a5f0665a3ec338c2db19e7a69212a9eeb5de44a40a45c577da4edcb +FROM registry.redhat.io/rhel9/redis-6@sha256:a6349fc0eee7cb05f8524344f556be81b86ee66f43612e76a1294c302735afde COPY --from=build-env /opt/app-root/src/backfill-redis /usr/local/bin/backfill-redis COPY LICENSE /licenses/license.txt WORKDIR /opt/app-root/src/home diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index 63d2e05a0..55159d9af 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784751462@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 AS build-cross-platform +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS build-cross-platform ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ GOFLAGS="-buildvcs=false" @@ -27,7 +27,7 @@ FROM --platform=linux/arm64 quay.io/securesign/rekor-cli@sha256:68931b10d94394 FROM --platform=linux/ppc64le quay.io/securesign/rekor-cli@sha256:23d78faa9a03044b6e871aec58e0c47c92583e98f935b02a7bc9c0cf82367c43 AS build-ppc64le FROM --platform=linux/s390x quay.io/securesign/rekor-cli@sha256:c6e3fe044789e052af5e127080626b84c54cf1cee0ced05833fe73b5f1b78c8c AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784751462@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS packager USER root RUN mkdir -p /binaries diff --git a/Dockerfile.rekor-cli.rh b/Dockerfile.rekor-cli.rh index ca96b26de..ceb341940 100644 --- a/Dockerfile.rekor-cli.rh +++ b/Dockerfile.rekor-cli.rh @@ -1,5 +1,5 @@ #Build stage# -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784751462@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS build-env ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ CGO_ENABLED=0 \ @@ -26,7 +26,7 @@ RUN git update-index --assume-unchanged Dockerfile.rekor-cli.rh && \ git update-index --no-assume-unchanged Dockerfile.rekor-cli.rh #Install stage -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:2e8edce823a48e51858f1fad3ff4cbf6875ce8a3f86b9eecf298bc2050c8652a +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:dd334afa72444fa46238fcf9e6bd399245adf746378735348cf84b9dfdca38f1 LABEL description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." LABEL io.k8s.description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." diff --git a/Dockerfile.rekor-server.rh b/Dockerfile.rekor-server.rh index 5efc41b61..b8ef58b56 100644 --- a/Dockerfile.rekor-server.rh +++ b/Dockerfile.rekor-server.rh @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784751462@sha256:5f5c97d7e6d917b8328321bcf2c9d5700de65b72d434ecdbbba6f35aaebaad40 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS build-env USER root RUN mkdir -p /opt/app-root && mkdir -p /opt/app-root/src && mkdir -p /opt/app-root/src/cmd && mkdir -p /opt/app-root/src/pkg && git config --global --add safe.directory /opt/app-root/src @@ -64,7 +64,7 @@ RUN mkdir -p /var/run/attestations && \ COPY --from=build-env /opt/app-root/src/rekor-server_test /usr/local/bin/rekor-server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:2e8edce823a48e51858f1fad3ff4cbf6875ce8a3f86b9eecf298bc2050c8652a as deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:dd334afa72444fa46238fcf9e6bd399245adf746378735348cf84b9dfdca38f1 as deploy LABEL description="Rekor aims to provide an immutable, tamper-resistant ledger of metadata generated within a software project’s supply chain." LABEL io.k8s.description="Rekor-Server provides a tamper resistant ledger." diff --git a/Dockerfile.trillian-log-server b/Dockerfile.trillian-log-server index f0fbe6b76..fdd38de7b 100644 --- a/Dockerfile.trillian-log-server +++ b/Dockerfile.trillian-log-server @@ -14,7 +14,7 @@ FROM ghcr.io/sigstore/scaffolding/trillian_log_server:v1.7.3@sha256:5a878e4e4f03790d2dda4b07a551ff9832128b307447d4156255c73690aa2da3 AS server -FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS deploy +FROM golang:1.26.5@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 AS deploy COPY --from=server /ko-app/trillian_log_server /usr/local/bin/trillian-log-server diff --git a/Dockerfile.trillian-log-signer b/Dockerfile.trillian-log-signer index bd80441e6..efa662076 100644 --- a/Dockerfile.trillian-log-signer +++ b/Dockerfile.trillian-log-signer @@ -14,7 +14,7 @@ FROM ghcr.io/sigstore/scaffolding/trillian_log_signer:v1.7.3@sha256:28c5ff40963f83ffdf4e2d9ea1e4e2c877c33cfb0ff068f3daad1c1080aad0ac AS server -FROM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS deploy +FROM golang:1.26.5@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 AS deploy COPY --from=server /ko-app/trillian_log_signer /usr/local/bin/trillian-log-signer