security: Pin base image to specific digest

This commit is contained in:
2025-10-03 18:51:40 +02:00
parent eb6252c134
commit adf1431494
+1 -1
View File
@@ -10,7 +10,7 @@ dependencies {
jib {
from {
image = "public.ecr.aws/docker/library/amazoncorretto:" + properties["projectSourceCompatibility"] + "-alpine"
image = "public.ecr.aws/docker/library/amazoncorretto:21-alpine@sha256:fda60fd7965970ce7ed7ce789b18418647b56ac6112fc17df006337bdc6355c4"
platforms {
platform {
architecture = "amd64"