Commit graph

4 commits

Author SHA1 Message Date
Chummy
4ede1c95ed
Merge pull request #392 from fettpl/fix/362-pin-cargo-audit
ci: pin cargo-audit to 0.22.1 in dev CI Dockerfile
2026-02-17 01:10:56 +08:00
fettpl
47e5483ade ci: pin cargo-audit to 0.22.1 in dev CI Dockerfile
Match the version pinned in the security workflow to ensure
reproducible CI builds.

Closes #362

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-16 17:50:17 +01:00
fettpl
38f6339a83 ci: pin Docker base images to SHA256 digests
Pin all FROM images in Dockerfile and dev/ci/Dockerfile to their
current SHA256 manifest digests for reproducible builds.

- rust:1.93-slim-trixie → @sha256:9663b80a...
- busybox:latest → busybox:1.37@sha256:b3255e7d...
- debian:trixie-slim → @sha256:f6e2cfac...
- gcr.io/distroless/cc-debian13:nonroot → @sha256:84fcd3c2...
- rust:1.92-slim → @sha256:bf3368a9...

Closes #359

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-16 17:42:05 +01:00
Will Sarg
b61d33aa1c
feat(dev): add local dockerized ci workflow (#342) 2026-02-16 09:10:39 -05:00