In the docker images, instead of pointing at something like
|
FROM microsoft/dotnet:2.2-sdk AS build |
change it to point at something like:
# <digest> is `microsoft/dotnet:2.2-sdk`
FROM microsoft/dotnet@<digest> AS build
This would ensure that anyone who wanted to rebuild the exact Dockerfile to ensure nothing sneaking was included could do so. As it is now, such a user would need to try every published version of the particular base image until they found the one that resulted in a matching layer.
In the docker images, instead of pointing at something like
nethermind/Dockerfile
Line 1 in 383df00
change it to point at something like:
This would ensure that anyone who wanted to rebuild the exact Dockerfile to ensure nothing sneaking was included could do so. As it is now, such a user would need to try every published version of the particular base image until they found the one that resulted in a matching layer.