ci(security): pin docker image hash (#11168)

2023-10-16 07:04:39 -04:00 · 2023-10-16 07:04:39 -04:00 · 8dc3969bc2
commit 8dc3969bc2
parent faea1d4791
2 changed files with 7 additions and 1 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -28,3 +28,9 @@ updates:
      all:
        patterns:
          - '*'
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: daily
+      time: '06:00'
+      timezone: Europe/Berlin
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@ -1,4 +1,4 @@
-FROM node:18
+FROM node:18@sha256:cd7fa8f136023f7500490e410ba70dd3982ccca21805264f2a260a3a97be7376

 # Install latest chrome dev package and fonts to support major charsets (Chinese, Japanese, Arabic, Hebrew, Thai and a few others)
 # Note: this installs the necessary libs to make the bundled version of Chrome that Puppeteer