Merge pull request #193 from rsksmart/fix_scorecard

Fix scorecard
rsksmart · Jan 21, 2025 · 684b7f1 · 684b7f1
2 parents 74aa1ba + 8143ecf
commit 684b7f1
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -13,6 +13,10 @@ updates:
       interval: daily
 
   - package-ecosystem: docker
-    directory: /
+    directories:
+      - /
+      - dockerized/explorer-api
+      - dockerized/mongod
+      - dockerized/rsk-node
     schedule:
       interval: daily
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:12 as node
+FROM node:12@sha256:01627afeb110b3054ba4a1405541ca095c8bfca1cb6f2be9479c767a2711879e as node
 ARG DEBIAN_FRONTEND=noninteractive
 RUN apt-get update -y && \
     apt-get install -y build-essential apt-utils git curl software-properties-common && \

diff --git a/dockerized/mongod/Dockerfile b/dockerized/mongod/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:xenial
+FROM ubuntu:xenial@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
 
 # add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added
 RUN groupadd -r mongodb && useradd -r -g mongodb mongodb

diff --git a/dockerized/rsk-node/Dockerfile b/dockerized/rsk-node/Dockerfile
@@ -3,7 +3,7 @@
 #
 
 # Pull base image.
-FROM ubuntu:bionic
+FROM ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 MAINTAINER RSK Release <[email protected]>