Merge pull request #7018 from nilo19/fix/dockerfile-cve

fix: Bump golang version to 1.23.1 to fix cves
kubernetes-sigs · Sep 11, 2024 · 040e6fa · 040e6fa
2 parents 4f1b898 + 07474cb
commit 040e6fa
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -14,7 +14,7 @@
 
 # syntax=docker/dockerfile:1
 
-FROM --platform=linux/amd64 golang:1.23.0-bookworm AS builder
+FROM --platform=linux/amd64 golang:1.23-bullseye@sha256:45b43371f21ec51276118e6806a22cbb0bca087ddd54c491fdc7149be01035d5 AS builder
 
 ARG ENABLE_GIT_COMMAND=true
 ARG ARCH=amd64

diff --git a/cloud-node-manager.Dockerfile b/cloud-node-manager.Dockerfile
@@ -14,7 +14,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=linux/amd64 golang:1.23.0-bookworm AS builder
+FROM --platform=linux/amd64 golang:1.23-bullseye@sha256:45b43371f21ec51276118e6806a22cbb0bca087ddd54c491fdc7149be01035d5 AS builder
 
 ARG ENABLE_GIT_COMMAND=true
 ARG ARCH=amd64

diff --git a/e2e.Dockerfile b/e2e.Dockerfile
@@ -14,7 +14,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.23.0-bookworm
+FROM --platform=linux/amd64 golang:1.23-bullseye@sha256:45b43371f21ec51276118e6806a22cbb0bca087ddd54c491fdc7149be01035d5 AS builder
 
 WORKDIR /go/src/sigs.k8s.io/cloud-provider-azure