trentuna/candle-annotator
8
0
Fork 0
Code Issues Pull requests Releases Packages Activity Actions

feat: add sha256 pinning TODO comments to both Dockerfiles

Browse source 
Add TODO comments above each FROM instruction in Dockerfile and
services/ml/Dockerfile instructing how to pin base images to sha256
digests for reproducible builds. Marks task 6.7 as complete.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Marko Djordjevic 2026-02-18 11:37:17 +01:00
parent 38b270140e
commit 5896e56faa
3 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Dockerfile
View file

@ -1,4 +1,5 @@
# Build stage
# TODO: Pin to sha256 digest after verifying with: docker pull node:20-alpine && docker inspect node:20-alpine --format='{{index .RepoDigests 0}}'
FROM node:20-alpine AS builder
WORKDIR /app
@ -12,6 +13,7 @@ COPY . .
RUN npm run build
# Production stage
# TODO: Pin to sha256 digest after verifying with: docker pull node:20-alpine && docker inspect node:20-alpine --format='{{index .RepoDigests 0}}'
FROM node:20-alpine
WORKDIR /app