From 0a1edfb3f6d4a53c89ed393d4b08ffd6df8cdca7 Mon Sep 17 00:00:00 2001 From: Jim Toth Date: Thu, 22 Oct 2026 02:13:18 -0400 Subject: [PATCH] Pins base image by digest and adds dependabot docker updates --- .github/dependabot.yml | 11 +++++++++++ apps/api-service/Dockerfile | 4 ++-- apps/geo-ip-service/Dockerfile | 4 ++-- 3 files changed, 15 insertions(+), 4 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..ede2ba6 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: docker + directories: + - /apps/api-service + - /apps/geo-ip-service + schedule: + interval: weekly + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] diff --git a/apps/api-service/Dockerfile b/apps/api-service/Dockerfile index 565d519..9714abd 100644 --- a/apps/api-service/Dockerfile +++ b/apps/api-service/Dockerfile @@ -1,11 +1,11 @@ -FROM docker.io/oven/bun:1.4.3 AS manifests +FROM docker.io/oven/bun:1.4.3@sha256:ec06c3b6cea04192ae6770c434f668ca41d343ad19fa6472216c7b48be39c598 AS manifests WORKDIR /repo COPY . . RUN mkdir /manifests \ && find . -name package.json -not -path '*/node_modules/*' -exec cp --parents {} /manifests \; \ && cp bun.lock /manifests -FROM docker.io/oven/bun:1.4.3 +FROM docker.io/oven/bun:1.4.3@sha256:ec06c3b6cea04192ae6770c434f668ca41d343ad19fa6472216c7b48be39c598 WORKDIR /app ENV NODE_ENV=production diff --git a/apps/geo-ip-service/Dockerfile b/apps/geo-ip-service/Dockerfile index c768b25..4e03277 100644 --- a/apps/geo-ip-service/Dockerfile +++ b/apps/geo-ip-service/Dockerfile @@ -1,11 +1,11 @@ -FROM docker.io/oven/bun:1.4.3 AS manifests +FROM docker.io/oven/bun:1.4.3@sha256:ec06c3b6cea04192ae6770c434f668ca41d343ad19fa6472216c7b48be39c598 AS manifests WORKDIR /repo COPY . . RUN mkdir /manifests \ && find . -name package.json -not -path '*/node_modules/*' -exec cp --parents {} /manifests \; \ && cp bun.lock /manifests -FROM docker.io/oven/bun:1.4.3 +FROM docker.io/oven/bun:1.4.3@sha256:ec06c3b6cea04192ae6770c434f668ca41d343ad19fa6472216c7b48be39c598 WORKDIR /app ENV NODE_ENV=production