Pin Dockerfile base image to SHA256 digest (#957)

Copilot · decyjphr · web-flow · commit 13d39376d563 · 2026-03-30T19:44:06.000-04:00
* Initial plan * Pin Docker base image to SHA256 digest to fix alert #128 Agent-Logs-Url: https://github.com/github/safe-settings/sessions/afcb39cb-64ea-43c7-8b49-200dd166ad5f Co-authored-by: decyjphr <57544838+decyjphr@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: decyjphr <57544838+decyjphr@users.noreply.github.com>
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine
+FROM node:22-alpine@sha256:4d64b49e6c891c8fc821007cb1cdc6c0db7773110ac2c34bf2e6960adef62ed3
 WORKDIR /opt/safe-settings
 ENV NODE_ENV production
 ENV HOST=0.0.0.0

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:22-alpine`
	`1`	`+FROM node:22-alpine@sha256:4d64b49e6c891c8fc821007cb1cdc6c0db7773110ac2c34bf2e6960adef62ed3`
`2`	`2`	`WORKDIR /opt/safe-settings`
`3`	`3`	`ENV NODE_ENV production`
`4`	`4`	`ENV HOST=0.0.0.0`