From: Naveen <redacted>
Date: Tue, 14 Jun 2022 15:21:20 +0000 (-0500)
Subject: chore: Included the digest for the docker image
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=b93526bfc679dfcaf2dd1828ffde7bf69fe77e18;p=stevenblack-hosts.git

chore: Included the digest for the docker image

- https://cloud.google.com/architecture/using-container-images
- https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
---

diff --git a/Dockerfile b/Dockerfile
index 59c551184..d71293ced 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,7 @@
-FROM python:3
+# using container digest is recommended https://github.com/opencontainers/image-spec/blob/main/descriptor.md#digests 
+# https://cloud.google.com/architecture/using-container-images
+
+FROM python:3@sha256:b7bfea0126f539ba570a01fb595ee84cc4e7dcac971ad83d12c848942fa52cb6
 
 WORKDIR /usr/src
 COPY requirements.txt ./
@@ -8,4 +11,4 @@ WORKDIR /usr/src/hosts
 
 # Now you launch this with
 #  $ docker build ./
-#  $ docker run -it (containerid) bash
\ No newline at end of file
+#  $ docker run -it (containerid) bash