chore(oci/library/alpine): pin dependencies

tinfoild[bot] · web-flow · commit 842cb9d7de2d · 2026-04-17T06:45:56.000Z
diff --git a/apps/bird/Dockerfile b/apps/bird/Dockerfile
@@ -1,6 +1,6 @@
 ARG VERSION
 
-FROM public.ecr.aws/docker/library/alpine:3.20
+FROM public.ecr.aws/docker/library/alpine:3.20@sha256:0830e25765fb2eda66bc54f9cc448002c164d5d7ca2f022d8a963e4647c786dd
 ARG VERSION
 RUN apk add bird=${VERSION}
 RUN apk add catatonit
diff --git a/apps/goatcounter/Dockerfile b/apps/goatcounter/Dockerfile
@@ -2,7 +2,7 @@
 ARG VERSION
 
 # Stage 1: Build (pulled from upstream Dockerfile https://github.com/botlabs-gg/yagpdb/blob/7e6d553bd203680a0a1d68afd94f815478538611/yagpdb_docker/Dockerfile)
-FROM public.ecr.aws/docker/library/alpine:3.19.0 AS builder
+FROM public.ecr.aws/docker/library/alpine:3.19.0@sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48 AS builder
 ARG VERSION
 ARG TARGETARCH
 
diff --git a/apps/k8s-crd-extractor/Dockerfile b/apps/k8s-crd-extractor/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/alpine:3.19.1
+FROM public.ecr.aws/docker/library/alpine:3.19.1@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 
 USER 0:0
 RUN apk add bash
diff --git a/apps/talosctl-image-pull-agent/Dockerfile b/apps/talosctl-image-pull-agent/Dockerfile
@@ -1,7 +1,7 @@
 ARG VERSION
 
 # Stage 1: Install webhook
-FROM public.ecr.aws/docker/library/alpine:3.19.0 AS builder
+FROM public.ecr.aws/docker/library/alpine:3.19.0@sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48 AS builder
 WORKDIR /
 ARG TARGETARCH
 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM public.ecr.aws/docker/library/alpine:3.19.1`
	`1`	`+FROM public.ecr.aws/docker/library/alpine:3.19.1@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b`
`2`	`2`
`3`	`3`	`USER 0:0`
`4`	`4`	`RUN apk add bash`