Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update images digests #28284

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
+14 −14
Open

Update images digests #28284

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/actions/docker-run/action.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ inputs:
required: true
image:
description: "The image to use"
default: "ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34"
default: "ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e"
required: false
workdir:
description: "The images working directory"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/build-beta.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- name: Harden Runner
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/build-old.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
contents: read

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down Expand Up @@ -139,7 +139,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- name: Harden Runner
Expand Down Expand Up @@ -262,7 +262,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- name: Harden Runner
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/build-world.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
# permissions:

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
contents: read

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down Expand Up @@ -175,7 +175,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- name: Harden Runner
Expand Down Expand Up @@ -303,7 +303,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- name: Harden Runner
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/lint-world.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ jobs:
group: wolfi-os-builder-${{ matrix.arch }}

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/postsubmit-bundle-build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ jobs:

runs-on: ubuntu-latest
container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
image: ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

permissions:
id-token: write
Expand Down Expand Up @@ -114,7 +114,7 @@ jobs:
)

BUNDLE=$(wolfictl bundle \
--bundle-base ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34 \
--bundle-base ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e \
--bundle-repo "${BUNDLE_REPO}" \
${COMMON_FLAGS} \
--runner bubblewrap \
Expand Down
4 changes: 2 additions & 2 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ dev-container:
-v "${PWD}:${PWD}" \
-w "${PWD}" \
-e SOURCE_DATE_EPOCH=0 \
ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e

PACKAGES_CONTAINER_FOLDER ?= /work/packages
TMP_REPOSITORIES_DIR := $(shell mktemp -d)
Expand Down Expand Up @@ -206,6 +206,6 @@ dev-container-wolfi:
--mount type=bind,source="${PWD}/local-melange.rsa.pub",destination="/etc/apk/keys/local-melange.rsa.pub",readonly \
--mount type=bind,source="$(TMP_REPOSITORIES_FILE)",destination="/etc/apk/repositories",readonly \
-w "$(PACKAGES_CONTAINER_FOLDER)" \
ghcr.io/wolfi-dev/sdk:latest@sha256:e8c9680e3262d27b28c38e84f51f8a8587c84dc192b0f198b96b11de27aafc34
ghcr.io/wolfi-dev/sdk:latest@sha256:64c18051f3d274aa3b7bf3721a6395acb9c68beb9447e12f2175b95933dddd7e
@rm "$(TMP_REPOSITORIES_FILE)"
@rmdir "$(TMP_REPOSITORIES_DIR)"