Merge pull request #45 from github/mageroni-patch-dockerfile

mageroni · web-flow · commit 12290b82a13c · 2026-02-15T14:59:47.000-06:00
Update Node.js image to specific SHA256 digest
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18-slim
+FROM node:18-slim@sha256:f9ab18e354e6855ae56ef2b290dd225c1e51a564f87584b9bd21dd651838830e
 WORKDIR /usr/src/app
 COPY package.json package-lock.json ./
 RUN npm ci --production

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:18-slim`
	`1`	`+FROM node:18-slim@sha256:f9ab18e354e6855ae56ef2b290dd225c1e51a564f87584b9bd21dd651838830e`
`2`	`2`	`WORKDIR /usr/src/app`
`3`	`3`	`COPY package.json package-lock.json ./`
`4`	`4`	`RUN npm ci --production`