Pin Docker base image to SHA256 digest to fix alert #128

Copilot · decyjphr · web-flow · commit 3921afdf2b12 · 2026-03-30T23:36:11.000Z
Agent-Logs-Url: https://github.com/github/safe-settings/sessions/afcb39cb-64ea-43c7-8b49-200dd166ad5f Co-authored-by: decyjphr <57544838+decyjphr@users.noreply.github.com>
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine
+FROM node:22-alpine@sha256:4d64b49e6c891c8fc821007cb1cdc6c0db7773110ac2c34bf2e6960adef62ed3
 WORKDIR /opt/safe-settings
 ENV NODE_ENV production
 ENV HOST=0.0.0.0

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:22-alpine`
	`1`	`+FROM node:22-alpine@sha256:4d64b49e6c891c8fc821007cb1cdc6c0db7773110ac2c34bf2e6960adef62ed3`
`2`	`2`	`WORKDIR /opt/safe-settings`
`3`	`3`	`ENV NODE_ENV production`
`4`	`4`	`ENV HOST=0.0.0.0`