From 56f43b5fbfb5ab7fdc3850ea92d3ed95ff20cbaa Mon Sep 17 00:00:00 2001 From: "red-hat-konflux[bot]" <126015336+red-hat-konflux[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 02:49:45 +0000 Subject: [PATCH] chore(deps): update docker images Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> --- Dockerfile | 2 +- Dockerfile.cli-stack.rh | 6 +++--- Dockerfile.clients.rh | 4 ++-- Dockerfile.conforma-cli-stack.rh | 6 +++--- Dockerfile.cosign.rh | 4 ++-- 5 files changed, 11 insertions(+), 11 deletions(-) diff --git a/Dockerfile b/Dockerfile index 951acee15f8..29c3df54e44 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,4 +15,4 @@ # This is used to we scrap the go version and use in CI to get the latest go version # and we use dependabot to keep the go version up to date -FROM golang:1.27.2 +FROM golang:1.27.3 diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index caa507f6a4e..18cbe868351 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS build-cross-platform +FROM registry.redhat.io/ubi9/go-toolset:9.8-1793107762@sha256:c8947b60e6568dcdc5f66d382e18fa1fb89039918f59783e45b8c90847579955 AS build-cross-platform ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root @@ -18,7 +18,7 @@ FROM --platform=linux/arm64 quay.io/securesign/cli-cosign@sha256:b71496adedc91 FROM --platform=linux/ppc64le quay.io/securesign/cli-cosign@sha256:f7019515c53440f22ebe3340c8905fed2805ac2cd1d4022b5c5c03b39d4d1877 AS build-ppc64le FROM --platform=linux/s390x quay.io/securesign/cli-cosign@sha256:1125b9898d1a3165fba2c96b143e63e3f8919f2d91cedf7f6899566d394b09c5 AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1793107762@sha256:c8947b60e6568dcdc5f66d382e18fa1fb89039918f59783e45b8c90847579955 AS packager USER root RUN mkdir -p /binaries @@ -55,7 +55,7 @@ RUN tar -czf /binaries/cosign_windows_amd64.tar.gz -C /tmp cosign.exe && \ RUN chmod -R a+rX /binaries # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-micro:9.8-1791765224@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3 +FROM registry.redhat.io/ubi9/ubi-micro:9.8-1791895366@sha256:5be877a2a280ae36eb9ab80ca4efb28bbf77c57abbba38137cdc37a03b8465e6 LABEL description="Flat image containing cosign CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing cosign CLI binaries for all platforms and architectures" diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh index 357a065d870..0ec1b7569bc 100644 --- a/Dockerfile.clients.rh +++ b/Dockerfile.clients.rh @@ -11,7 +11,7 @@ FROM quay.io/securesign/rekor-cli-stack@sha256:2c1462e0ff5f1d61449946108d9790066 FROM quay.io/securesign/fetch-tsa-certs-cli-stack@sha256:57d65e50c6e987b5e8c12ecc36c0f184cdac0d85b74248fa8217b4761f5d1fb4 AS fetch-tsa-certs # ec -FROM registry.redhat.io/rhtas/ec-rhel9:0.9-1790602124@sha256:04b5d090dd84a84784efbf30c159023cb9c2e952b76c3ddd298f6697f60195e4 AS ec +FROM registry.redhat.io/rhtas/ec-rhel9:0.9-1793008556@sha256:2bfbbcc4c949aa6d920c7133ac7a685bedb4d74b33481d98007492fbc48eebe7 AS ec # trillian-createtree and trillian-updatetree FROM quay.io/securesign/trillian-cli-stack@sha256:f400552a924717322657b7f0941df497ea8f9c95a9a12eed79d94a35c4bed9e3 AS trillian @@ -19,7 +19,7 @@ FROM quay.io/securesign/trillian-cli-stack@sha256:f400552a924717322657b7f0941df4 # tuftool FROM quay.io/securesign/tuftool-cli-stack@sha256:80c50630b00b2dc4698f333b2df1eea8407f1862fb0ca99d5a3271738d9af5da AS tuftool -FROM registry.redhat.io/ubi9/httpd-24@sha256:cd8e4f2bb54f535f68e48969d03b58581c7c2b47ee17c3e8b7893323a32bee3b +FROM registry.redhat.io/ubi9/httpd-24@sha256:f044268a321397ff4af4945763e558e14aad584c915e4cae9ae485a30deda303 ENV APP_ROOT=/opt/app-root WORKDIR $APP_ROOT/src/ diff --git a/Dockerfile.conforma-cli-stack.rh b/Dockerfile.conforma-cli-stack.rh index be5bdea1f67..5a790324f44 100644 --- a/Dockerfile.conforma-cli-stack.rh +++ b/Dockerfile.conforma-cli-stack.rh @@ -1,6 +1,6 @@ -FROM registry.redhat.io/rhtas/ec-rhel9:0.9-1790602124@sha256:04b5d090dd84a84784efbf30c159023cb9c2e952b76c3ddd298f6697f60195e4 AS ec +FROM registry.redhat.io/rhtas/ec-rhel9:0.9-1793008556@sha256:2bfbbcc4c949aa6d920c7133ac7a685bedb4d74b33481d98007492fbc48eebe7 AS ec -FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1793107762@sha256:c8947b60e6568dcdc5f66d382e18fa1fb89039918f59783e45b8c90847579955 AS packager USER root RUN mkdir -p /binaries @@ -43,7 +43,7 @@ RUN gzip -d /tmp/ec_windows_amd64.exe.gz && \ rm /tmp/ec_windows_amd64.exe # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-minimal@sha256:8fbe5ca09afa1990e9ff55fd8ee7cb073b823a7640c3c8381ece64f22401d2a2 +FROM registry.redhat.io/ubi9/ubi-minimal@sha256:6f3a78179e0b30b930a186e7f68a4af52e51bb82406c9653be10bddd624e40f5 LABEL description="Flat image containing Conforma CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing Conforma CLI binaries for all platforms and architectures" diff --git a/Dockerfile.cosign.rh b/Dockerfile.cosign.rh index e3ee655236a..d451b02dbfc 100644 --- a/Dockerfile.cosign.rh +++ b/Dockerfile.cosign.rh @@ -1,5 +1,5 @@ # Build stage -FROM registry.redhat.io/ubi9/go-toolset:9.8-1791479310@sha256:6f246e8913d082df463b62a74c72f0d2b410583e1b2ac48add39cd7ede59ce62 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1793107762@sha256:c8947b60e6568dcdc5f66d382e18fa1fb89039918f59783e45b8c90847579955 AS build-env WORKDIR /cosign COPY . . @@ -11,7 +11,7 @@ RUN git config --global --add safe.directory /cosign && \ git update-index --no-assume-unchanged Dockerfile.cosign.rh # Install Cosign -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8fbe5ca09afa1990e9ff55fd8ee7cb073b823a7640c3c8381ece64f22401d2a2 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:6f3a78179e0b30b930a186e7f68a4af52e51bb82406c9653be10bddd624e40f5 LABEL description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices." LABEL io.k8s.description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."