chore(codex-security): sync public projection

  - [codex-security] pin customer container image digests (#1...

GitOrigin-Timestamp=2026-07-27T21:13:30-07:00
GitOrigin-RevId: ebff6a71e20d116e340456d6235b6ae680c72dc1

Author: mldangelo-oai

Dockerfile

@@ -1,6 +1,6 @@
-# syntax=docker/dockerfile:1
+# syntax=docker/dockerfile:1@sha256:87999aa3d42bdc6bea60565083ee17e86d1f3339802f543c0d03998580f9cb89
 
-FROM node:22-bookworm-slim AS package
+FROM node:22-bookworm-slim@sha256:6c74791e557ce11fc957704f6d4fe134a7bc8d6f5ca4403205b2966bd488f6b3 AS package
 
 WORKDIR /build/sdk/typescript
 
@@ -17,7 +17,7 @@ RUN pnpm run types \
     && pnpm pack --pack-destination /build/package \
     && node scripts/check-package.mjs /build/package/*.tgz
 
-FROM node:22-bookworm-slim
+FROM node:22-bookworm-slim@sha256:6c74791e557ce11fc957704f6d4fe134a7bc8d6f5ca4403205b2966bd488f6b3
 
 LABEL org.opencontainers.image.title="Codex Security" \
       org.opencontainers.image.description="Noninteractive, resumable Codex Security CSV repository scans" \