From 68e274127241e00d005001d5499c151642015dc2 Mon Sep 17 00:00:00 2001 From: Jens Caers Date: Wed, 26 Aug 2026 22:21:59 +0200 Subject: [PATCH] supply-chain: pin all-in-one production base images --- deploy/unraid/Dockerfile.all-in-one | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/unraid/Dockerfile.all-in-one b/deploy/unraid/Dockerfile.all-in-one index 2e70b5b1..43b29f56 100644 --- a/deploy/unraid/Dockerfile.all-in-one +++ b/deploy/unraid/Dockerfile.all-in-one @@ -1,4 +1,4 @@ -FROM node:20-alpine AS frontend-build +FROM node:20.20.2-alpine3.23@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293 AS frontend-build WORKDIR /frontend COPY frontend/package.json frontend/package-lock.json ./ @@ -6,7 +6,7 @@ RUN npm ci COPY frontend/ ./ RUN npm run build -FROM postgres:16-bookworm AS runtime +FROM postgres:16.15-bookworm@sha256:bb3e1a57e5407e0a5280b4211980a5e537f4abd234a87014ac979849a78dd825 AS runtime ARG GEOINTEL_INSTALL_AI=false ARG GEOINTEL_TORCH_INDEX_URL=https://download.pytorch.org/whl/cu128