From adf14314948f3896a7af315320d528fc764c8c29 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Fri, 3 Oct 2025 18:51:40 +0200 Subject: [PATCH] security: Pin base image to specific digest --- module-deploy/deploy.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/module-deploy/deploy.gradle.kts b/module-deploy/deploy.gradle.kts index d84442a..54e4717 100644 --- a/module-deploy/deploy.gradle.kts +++ b/module-deploy/deploy.gradle.kts @@ -10,7 +10,7 @@ dependencies { jib { from { - image = "public.ecr.aws/docker/library/amazoncorretto:" + properties["projectSourceCompatibility"] + "-alpine" + image = "public.ecr.aws/docker/library/amazoncorretto:21-alpine@sha256:fda60fd7965970ce7ed7ce789b18418647b56ac6112fc17df006337bdc6355c4" platforms { platform { architecture = "amd64"