diff --git a/Dockerfile.backfill-redis.rh b/Dockerfile.backfill-redis.rh index 1806c205d..a8db36367 100644 --- a/Dockerfile.backfill-redis.rh +++ b/Dockerfile.backfill-redis.rh @@ -1,6 +1,6 @@ # Build stage -FROM registry.redhat.io/ubi9/go-toolset:9.7-1778054913@sha256:180d433d97773ac90384662ee0f54c3b474f6eeb7219e414a4ca323d1196bb13 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.7-1778171507@sha256:f9c8537423d96da6c0e704a7d40a1bd5401c4287a05c7f7f196550a5a375a6b6 AS build-env ENV GOEXPERIMENT=strictfipsruntime ENV CGO_ENABLED=1 @@ -18,7 +18,7 @@ ARG SERVER_LDFLAGS RUN go build -mod=readonly -trimpath -ldflags "$(SERVER_LDFLAGS)" -o backfill-redis ./cmd/backfill-index # Install stage -FROM registry.redhat.io/rhel9/redis-6@sha256:7cd55174d27b41f59c2a0831cc31a5557a90f81d51f30c1e26232303898671ea +FROM registry.redhat.io/rhel9/redis-6@sha256:0a73c6d05423299c3f1997d875672935a4e5106b726a92c0da87a16e48a37730 COPY --from=build-env /opt/app-root/src/backfill-redis /usr/local/bin/backfill-redis COPY LICENSE /licenses/license.txt WORKDIR /opt/app-root/src/home diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index 083be2211..d43b11305 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -3,7 +3,7 @@ FROM --platform=linux/arm64 quay.io/securesign/rekor-cli@sha256:8bad272115b6ac FROM --platform=linux/ppc64le quay.io/securesign/rekor-cli@sha256:5b4cfc9a75b6280f71623e2dbc554b14c01b23cc34d636f8ef79a9e41e3a8e03 AS build-ppc64le FROM --platform=linux/s390x quay.io/securesign/rekor-cli@sha256:794e55323b2ad900b2e9cd4045a79c18581ceac40406e09ec6c94ed7441d43e2 AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.7-1778054913@sha256:180d433d97773ac90384662ee0f54c3b474f6eeb7219e414a4ca323d1196bb13 AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.7-1778171507@sha256:f9c8537423d96da6c0e704a7d40a1bd5401c4287a05c7f7f196550a5a375a6b6 AS packager USER root RUN mkdir -p /binaries @@ -47,7 +47,7 @@ RUN gzip -d /tmp/rekor_cli_windows_amd64.exe.gz && \ rm /tmp/rekor_cli_windows_amd64.exe # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-minimal@sha256:8d0a8fb39ec907e8ca62cdd24b62a63ca49a30fe465798a360741fde58437a23 +FROM registry.redhat.io/ubi9/ubi-minimal@sha256:b9b10f42d7eba7ad4a6d5ef26b7d34fdc892b2ffe59b8d0372ec884008569eb6 LABEL description="Flat image containing rekor-cli binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing rekor-cli binaries for all platforms and architectures" diff --git a/Dockerfile.rekor-cli.rh b/Dockerfile.rekor-cli.rh index 12f706209..1da3cb447 100644 --- a/Dockerfile.rekor-cli.rh +++ b/Dockerfile.rekor-cli.rh @@ -1,5 +1,5 @@ #Build stage# -FROM registry.redhat.io/ubi9/go-toolset:9.7-1778054913@sha256:180d433d97773ac90384662ee0f54c3b474f6eeb7219e414a4ca323d1196bb13 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.7-1778171507@sha256:f9c8537423d96da6c0e704a7d40a1bd5401c4287a05c7f7f196550a5a375a6b6 AS build-env ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ CGO_ENABLED=1 \ @@ -40,7 +40,7 @@ RUN set -euo pipefail; \ git update-index --no-assume-unchanged Dockerfile.rekor-cli.rh #Install stage -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8d0a8fb39ec907e8ca62cdd24b62a63ca49a30fe465798a360741fde58437a23 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:b9b10f42d7eba7ad4a6d5ef26b7d34fdc892b2ffe59b8d0372ec884008569eb6 LABEL description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." LABEL io.k8s.description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." diff --git a/Dockerfile.rekor-server.rh b/Dockerfile.rekor-server.rh index e280572cd..e1ec1663c 100644 --- a/Dockerfile.rekor-server.rh +++ b/Dockerfile.rekor-server.rh @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM registry.redhat.io/ubi9/go-toolset:9.7-1778054913@sha256:180d433d97773ac90384662ee0f54c3b474f6eeb7219e414a4ca323d1196bb13 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.7-1778171507@sha256:f9c8537423d96da6c0e704a7d40a1bd5401c4287a05c7f7f196550a5a375a6b6 AS build-env RUN mkdir -p /opt/app-root && mkdir -p /opt/app-root/src && mkdir -p /opt/app-root/src/cmd && mkdir -p /opt/app-root/src/pkg && git config --global --add safe.directory /opt/app-root/src @@ -61,7 +61,7 @@ RUN mkdir -p /var/run/attestations && \ COPY --from=build-env /opt/app-root/src/rekor-server_test /usr/local/bin/rekor-server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8d0a8fb39ec907e8ca62cdd24b62a63ca49a30fe465798a360741fde58437a23 as deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:b9b10f42d7eba7ad4a6d5ef26b7d34fdc892b2ffe59b8d0372ec884008569eb6 as deploy LABEL description="Rekor aims to provide an immutable, tamper-resistant ledger of metadata generated within a software project’s supply chain." LABEL io.k8s.description="Rekor-Server provides a tamper resistant ledger."