fix(ci): pin sandbox Dockerfile base image to digest (#520)
Pin ubuntu:22.04 to its current manifest digest to ensure reproducible builds and prevent supply-chain mutations. Closes #513 Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
d33c2e40f5
commit
d2ed5113e9
1 changed files with 1 additions and 1 deletions
|
|
@ -1,4 +1,4 @@
|
|||
FROM ubuntu:22.04
|
||||
FROM ubuntu:22.04@sha256:c7eb020043d8fc2ae0793fb35a37bff1cf33f156d4d4b12ccc7f3ef8706c38b1
|
||||
|
||||
# Prevent interactive prompts during package installation
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue