From 7515ff3ccaa199ffc44d969d89cf2ceeec912d19 Mon Sep 17 00:00:00 2001 From: Anurag Bandyopadhyay Date: Tue, 14 Jul 2026 00:41:32 +0530 Subject: [PATCH 1/2] chore: pin distroless base image by digest for scorecard --- .goreleaser.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.goreleaser.Dockerfile b/.goreleaser.Dockerfile index 3a4fcdd5..308d0a9f 100644 --- a/.goreleaser.Dockerfile +++ b/.goreleaser.Dockerfile @@ -1,4 +1,4 @@ -FROM gcr.io/distroless/static-debian13:nonroot +FROM gcr.io/distroless/static-debian13:nonroot@sha256:d29e660cc75a5b6b1334e03c5c81ccf9bc0884a002c6000dbf0fb96034814478 ARG TARGETPLATFORM COPY ${TARGETPLATFORM}/fga /fga From a267031b161ce0e1fded1643a31feed66b170845 Mon Sep 17 00:00:00 2001 From: Anurag Bandyopadhyay Date: Tue, 14 Jul 2026 00:52:27 +0530 Subject: [PATCH 2/2] chore: pin dev Dockerfile go base image by digest for scorecard --- .dev.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.dev.Dockerfile b/.dev.Dockerfile index 9ab90f9e..95704c75 100644 --- a/.dev.Dockerfile +++ b/.dev.Dockerfile @@ -1,4 +1,4 @@ -FROM cgr.dev/chainguard/go:1.25 AS builder +FROM cgr.dev/chainguard/go:latest@sha256:3348f7dc08cebd3c933c92a2cbc734c31bab5993f4b8e8d56577ba58e85cd66e AS builder WORKDIR /app