Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# syntax=docker/dockerfile:1@sha256:b6afd42430b15f2d2a4c5a02b919e98a525b785b1aaff16747d2f623364e39b6
# syntax=docker/dockerfile:1@sha256:2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769

# Build arguments for versioning
ARG BUILD_TIME=unknown
Expand All @@ -8,7 +8,7 @@ ARG RELEASE_CHANNEL=dev

# Stage 1: Build frontend
# Pin to digest for reproducible builds (Dependabot will update this)
FROM node:24-alpine@sha256:cd6fb7efa6490f039f3471a189214d5f548c11df1ff9e5b181aa49e22c14383e AS frontend-builder
FROM node:24-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f AS frontend-builder

WORKDIR /app/frontend

Expand All @@ -27,7 +27,7 @@ RUN npm run build
# Stage 2: Build Python dependencies
# Use Chainguard's dev image which includes pip and build tools
# Pin to digest for reproducible builds (Dependabot will update this)
FROM cgr.dev/chainguard/python:latest-dev@sha256:16ef9480a72a9e1f422ade7c60c7d4d4a3ef258b676ecd223ae137972c3520fc AS python-builder
FROM cgr.dev/chainguard/python:latest-dev@sha256:e28e4cb5d25e89524057047075b0c31d03ea4d2a83b267b50a46cb972dc507d3 AS python-builder

WORKDIR /app

Expand All @@ -46,7 +46,7 @@ RUN python -m venv /app/venv && \
# Stage 3: Runtime with minimal Chainguard image
# This image has 0-5 CVEs typically vs 800+ in python:3.12-slim
# Pin to digest for reproducible builds (Dependabot will update this)
FROM cgr.dev/chainguard/python:latest@sha256:90d81f1d75d9042571a6776b89763678f77fae44e399baf823466091bd494b02
FROM cgr.dev/chainguard/python:latest@sha256:d5621d0d63e5212f6ae9fd612c6d2a72f65155f978538f984a7a0cdafbd7cdb2

# Re-declare build args for this stage
ARG BUILD_TIME=unknown
Expand Down
Loading