Pin dependencies

pagopa · Nov 18, 2024 · 2d2c56d · 2d2c56d
1 parent 82a2429
commit 2d2c56d
Show file tree

Hide file tree

Showing 15 changed files with 30 additions and 30 deletions.
diff --git a/azurite-init/Dockerfile.azurite-init b/azurite-init/Dockerfile.azurite-init
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/azure-cli:2.47.0
+FROM mcr.microsoft.com/azure-cli:2.47.0@sha256:a9fc568020f977fbac633c1c8cb096029214d121e4a03531e74b6a685d161119
 
 WORKDIR /usr/queues/script
 

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -4,7 +4,7 @@ services:
 
   mongo:
     container_name: pagopa-ecommerce-mongo
-    image: mongo
+    image: mongo@sha256:c165af1a407eefce644877bf5a59ba3d9ca762e62b4f1723c919dc08dc32f4d0
     env_file: mongodb/mongodb.env
     ports:
       - "${MONGO_PORT}:27017"
@@ -16,7 +16,7 @@ services:
 
   mongo-express:
     container_name: pagopa-ecommerce-mongo-express
-    image: mongo-express
+    image: mongo-express@sha256:1b23d7976f0210dbec74045c209e52fbb26d29b2e873d6c6fa3d3f0ae32c2a64
     env_file: mongodb/mongo-express.env
     ports:
       - "${MONGO_EXPRESS_PORT}:8081"
@@ -27,7 +27,7 @@ services:
 
   redis:
     container_name: pagopa-ecommerce-redis
-    image: redis
+    image: redis@sha256:af0be38eb8e43191bae9b03fe5c928803930b6f93e2dde3a7ad1165c04b1ce22
     command: ["sh", "-c", 'exec redis-server --requirepass "$$REDIS_PASSWORD"']
     ports:
       - "${REDIS_PORT}:6379"
@@ -36,7 +36,7 @@ services:
 
   redis-insight:
     container_name: pagopa-ecommerce-redis-insight
-    image: redislabs/redisinsight
+    image: redislabs/redisinsight@sha256:ef29a4cae9ce79b659734f9e3e77db3a5f89876601c89b1ee8fdf18d2f92bb9d
     ports:
       - "${REDIS_INSIGHT_PORT}:5540"
     networks:
@@ -209,7 +209,7 @@ services:
       - pagopa-ecommerce-net
   traefik:
     container_name: pagopa-ecommerce-traefik
-    image: traefik:v2.7
+    image: traefik:v2.7@sha256:41bfa070b43184314a1fd86d5b68d367d3f744e972ca3fe44a8875f69935c2d7
     ports:
       - "8000:80"
       - "8090:8080"
@@ -221,7 +221,7 @@ services:
       - pagopa-ecommerce-net
 
   storage:
-    image: mcr.microsoft.com/azure-storage/azurite:3.24.0
+    image: mcr.microsoft.com/azure-storage/azurite:3.24.0@sha256:2e606815b1e65e3ad62e8e95d27776d877c882bac2277a9ed0a16d4a2dfa4541
     container_name: azurite
     ports:
       - "10000:10000"

diff --git a/gec-mock/Dockerfile.gec-mock b/gec-mock/Dockerfile.gec-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/nodo-mock/Dockerfile.nodo-mock b/nodo-mock/Dockerfile.nodo-mock
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 
 ARG NODO_MOCK_COMMIT_SHA
 

diff --git a/npg-mock/Dockerfile.npg-mock b/npg-mock/Dockerfile.npg-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/pagopa-ecommerce-event-dispatcher-service/Dockerfile.event-dispatcher-service b/pagopa-ecommerce-event-dispatcher-service/Dockerfile.event-dispatcher-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-event-dispatcher-service
 
 ARG ECOMMERCE_EVENT_DISPATCHER_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_EVENT_DISPATCHER_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-event-dispatcher-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-event-dispatcher-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-payment-methods-service/Dockerfile.payment-methods-service b/pagopa-ecommerce-payment-methods-service/Dockerfile.payment-methods-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-payment-methods-service
 
 ARG ECOMMERCE_PAYMENT_METHODS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_PAYMENT_METHODS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-payment-methods-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-payment-methods-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml clean package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-payment-requests-service/Dockerfile.payment-requests-service b/pagopa-ecommerce-payment-requests-service/Dockerfile.payment-requests-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-payment-requests-service
 
 ARG ECOMMERCE_PAYMENT_REQUESTS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_PAYMENT_REQUESTS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-payment-requests-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-payment-requests-service
@@ -18,7 +18,7 @@ COPY --from=clone ${REPO}/ .
 RUN mvn -f ./pom.xml clean package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-transactions-scheduler-service/Dockerfile.transactions-scheduler-service b/pagopa-ecommerce-transactions-scheduler-service/Dockerfile.transactions-scheduler-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-transactions-scheduler-service
 
 ARG ECOMMERCE_TRANSACTIONS_SCHEDULER_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_TRANSACTIONS_SCHEDULER_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-transactions-scheduler-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-transactions-scheduler-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-transactions-service/Dockerfile.transactions-service b/pagopa-ecommerce-transactions-service/Dockerfile.transactions-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-transactions-service
 
 ARG ECOMMERCE_TRANSACTIONS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_TRANSACTIONS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-transactions-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-transactions-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-user-stats-service/Dockerfile.user-stats-service b/pagopa-ecommerce-user-stats-service/Dockerfile.user-stats-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:0f018c79d7467f7b4cc6c00e1508e71cf107ed2cac2315e5d3ea62d0224968e1 AS clone
 WORKDIR /workspace/pagopa-ecommerce-user-stats-service
 
 ARG ECOMMERCE_USER_STATS_COMMIT_SHA

diff --git a/pagopa-notifications-service/Dockerfile.notifications-service b/pagopa-notifications-service/Dockerfile.notifications-service
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 
 ARG NOTIFICATIONS_SERVICE_COMMIT_SHA
 

diff --git a/pagopa-personal-data-vault-tokenizer/Dockerfile.pdv b/pagopa-personal-data-vault-tokenizer/Dockerfile.pdv
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 WORKDIR /usr/src/app
 
 COPY ./* /usr/src/app/

diff --git a/psp-mock/Dockerfile.psp-mock b/psp-mock/Dockerfile.psp-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/wallet-mock/Dockerfile.wallet-mock b/wallet-mock/Dockerfile.wallet-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app