diff --git a/Dockerfile b/Dockerfile index 09485f012e9..951acee15f8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,4 +15,4 @@ # This is used to we scrap the go version and use in CI to get the latest go version # and we use dependabot to keep the go version up to date -FROM golang:1.27.0 +FROM golang:1.27.2 diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index 4ae4d03bc66..32faf6e05d4 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS build-cross-platform +FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS build-cross-platform ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root @@ -18,7 +18,7 @@ FROM --platform=linux/arm64 quay.io/securesign/cli-cosign@sha256:9faf773f467c4 FROM --platform=linux/ppc64le quay.io/securesign/cli-cosign@sha256:afe8c4bcb496d075d1c09be216c3acd0b704413a5c9b2ce19d788aa95e22e4b6 AS build-ppc64le FROM --platform=linux/s390x quay.io/securesign/cli-cosign@sha256:9f834a3d9ef2882b63fd2fce5a714861835d3e426bc7ba29ea8ad881fb75e0e4 AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS packager USER root RUN mkdir -p /binaries @@ -55,7 +55,7 @@ RUN tar -czf /binaries/cosign_windows_amd64.tar.gz -C /tmp cosign.exe && \ RUN chmod -R a+rX /binaries # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-micro:9.8-1786321990@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95 +FROM registry.redhat.io/ubi9/ubi-micro:9.8-1789345812@sha256:7a0454cbd9bd847e8f6a63b6f0254a6efbeb6e0ed71a5d824a4f6cccbe626650 LABEL description="Flat image containing cosign CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing cosign CLI binaries for all platforms and architectures" diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh index d8f241dd28d..3f8b912abe1 100644 --- a/Dockerfile.clients.rh +++ b/Dockerfile.clients.rh @@ -11,7 +11,7 @@ FROM quay.io/securesign/rekor-cli-stack@sha256:6d241c2120fab449851877a5095f20d6e FROM quay.io/securesign/fetch-tsa-certs-cli-stack@sha256:749b442a8ad4e785790ddef41e6e07484482c9e77e4cc13bdc8c49c6b2dd09c3 AS fetch-tsa-certs # ec -FROM registry.redhat.io/rhtas/ec-rhel9:0.8-1787078040@sha256:30a8f115b955641de6e6bcbd3bfaae5de35ccc18bb2c5b1d69b362fd560c2257 AS ec +FROM registry.redhat.io/rhtas/ec-rhel9:0.9-1790602124@sha256:04b5d090dd84a84784efbf30c159023cb9c2e952b76c3ddd298f6697f60195e4 AS ec # trillian-createtree and trillian-updatetree FROM quay.io/securesign/trillian-cli-stack@sha256:ea127fb00bd50a39b89512900e7d743b95d3ff55b5b4f409c4acec7a5ec67c58 AS trillian @@ -22,7 +22,7 @@ FROM quay.io/securesign/tuftool-cli-stack@sha256:95cad07223ca7cfa5d0f3312f57a3cb # tufcli FROM quay.io/securesign/tufcli-cli-stack@sha256:bf844d92f07123680ab5c62b35994a976863d9da61e82b3583104ea7de473844 AS tufcli -FROM registry.redhat.io/ubi9/httpd-24@sha256:3f35063ff686e1881c47b9f542ae4b957ab3ce188f43f75a10386a584d0a2258 +FROM registry.redhat.io/ubi9/httpd-24@sha256:cd8e4f2bb54f535f68e48969d03b58581c7c2b47ee17c3e8b7893323a32bee3b ENV APP_ROOT=/opt/app-root WORKDIR $APP_ROOT/src/ diff --git a/Dockerfile.conforma-cli-stack.rh b/Dockerfile.conforma-cli-stack.rh index 8dc62b3fb61..f5cc2b52731 100644 --- a/Dockerfile.conforma-cli-stack.rh +++ b/Dockerfile.conforma-cli-stack.rh @@ -4,7 +4,7 @@ FROM --platform=linux/ppc64le quay.io/redhat-user-workloads/rhtap-contract-tenan FROM --platform=linux/s390x quay.io/redhat-user-workloads/rhtap-contract-tenant/ec-v08/cli-v08@sha256:3e332ca617d16249f803e2eb1918189a5cc8ab1275bb03a5e8dbe3d0d329cd4f AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS packager USER root RUN mkdir -p /binaries @@ -49,7 +49,7 @@ RUN gzip -d /tmp/ec_windows_amd64.exe.gz && \ rm /tmp/ec_windows_amd64.exe # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-minimal@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41 +FROM registry.redhat.io/ubi9/ubi-minimal@sha256:5ed244b62bbf4095080144d9d35eb8fcd3d39a9801f94aadd63b9d10978a01ae LABEL description="Flat image containing Conforma CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing Conforma CLI binaries for all platforms and architectures" diff --git a/Dockerfile.cosign.rh b/Dockerfile.cosign.rh index 216289aeea4..01961a1e3e9 100644 --- a/Dockerfile.cosign.rh +++ b/Dockerfile.cosign.rh @@ -1,5 +1,5 @@ # Build stage -FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS build-env WORKDIR /cosign COPY . . @@ -12,7 +12,7 @@ RUN git config --global --add safe.directory /cosign && \ git update-index --no-assume-unchanged Dockerfile.cosign.rh # Install Cosign -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5ed244b62bbf4095080144d9d35eb8fcd3d39a9801f94aadd63b9d10978a01ae LABEL description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices." LABEL io.k8s.description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."