[StepSecurity] Apply security best practices (#109)

Signed-off-by: StepSecurity Bot <[email protected]>
xeol-io · Aug 13, 2023 · a00c246 · a00c246
1 parent d3c4092
commit a00c246
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 FROM gcr.io/distroless/static-debian11@sha256:7198a357ff3a8ef750b041324873960cf2153c11cc50abb9d8d5f8bb089f6b4e AS build
 
 
-FROM alpine:3.17
+FROM alpine:3.17@sha256:f71a5f071694a785e064f05fed657bf8277f1b2113a8ed70c90ad486d6ee54dc
 # needed for version check HTTPS request
 COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt