Pin dependencies

pagopa · May 27, 2024 · bde3128 · bde3128
1 parent 53c3abc
commit bde3128
Show file tree

Hide file tree

Showing 15 changed files with 30 additions and 30 deletions.
diff --git a/azurite-init/Dockerfile.azurite-init b/azurite-init/Dockerfile.azurite-init
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/azure-cli:2.47.0
+FROM mcr.microsoft.com/azure-cli:2.47.0@sha256:a9fc568020f977fbac633c1c8cb096029214d121e4a03531e74b6a685d161119
 
 WORKDIR /usr/queues/script
 

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -4,7 +4,7 @@ services:
 
   mongo:
     container_name: pagopa-ecommerce-mongo
-    image: mongo
+    image: mongo@sha256:97aac78a80553735b3d9b9b7212803468781b4859645f892a3d04e6b621a7b77
     env_file: mongodb/mongodb.env
     ports:
       - "${MONGO_PORT}:27017"
@@ -16,7 +16,7 @@ services:
 
   mongo-express:
     container_name: pagopa-ecommerce-mongo-express
-    image: mongo-express
+    image: mongo-express@sha256:1b23d7976f0210dbec74045c209e52fbb26d29b2e873d6c6fa3d3f0ae32c2a64
     env_file: mongodb/mongo-express.env
     ports:
       - "${MONGO_EXPRESS_PORT}:8081"
@@ -27,7 +27,7 @@ services:
 
   redis:
     container_name: pagopa-ecommerce-redis
-    image: redis
+    image: redis@sha256:01afb31d6d633451d84475ff3eb95f8c48bf0ee59ec9c948b161adb4da882053
     command: ["sh", "-c", 'exec redis-server --requirepass "$$REDIS_PASSWORD"']
     ports:
       - "${REDIS_PORT}:6379"
@@ -36,7 +36,7 @@ services:
 
   redis-insight:
     container_name: pagopa-ecommerce-redis-insight
-    image: redislabs/redisinsight
+    image: redislabs/redisinsight@sha256:a46f32c97b01f8e14a3a7a04095e08b81c4818279f1d1f78b4ee03b43273f64a
     ports:
       - "${REDIS_INSIGHT_PORT}:8001"
     networks:
@@ -211,7 +211,7 @@ services:
       - pagopa-ecommerce-net
   traefik:
     container_name: pagopa-ecommerce-traefik
-    image: traefik:v2.7
+    image: traefik:v2.7@sha256:41bfa070b43184314a1fd86d5b68d367d3f744e972ca3fe44a8875f69935c2d7
     ports:
       - "8000:80"
       - "8090:8080"
@@ -223,7 +223,7 @@ services:
       - pagopa-ecommerce-net
 
   storage:
-    image: mcr.microsoft.com/azure-storage/azurite:3.24.0
+    image: mcr.microsoft.com/azure-storage/azurite:3.24.0@sha256:2e606815b1e65e3ad62e8e95d27776d877c882bac2277a9ed0a16d4a2dfa4541
     container_name: azurite
     ports:
       - "10000:10000"

diff --git a/gec-mock/Dockerfile.gec-mock b/gec-mock/Dockerfile.gec-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/nodo-mock/Dockerfile.nodo-mock b/nodo-mock/Dockerfile.nodo-mock
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 
 ARG NODO_MOCK_COMMIT_SHA
 

diff --git a/npg-mock/Dockerfile.npg-mock b/npg-mock/Dockerfile.npg-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/pagopa-ecommerce-event-dispatcher-service/Dockerfile.event-dispatcher-service b/pagopa-ecommerce-event-dispatcher-service/Dockerfile.event-dispatcher-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:4d7fe8d770483993c0cec264d49a573bac49e5239db47a9846572352e72da49c AS clone
 WORKDIR /workspace/pagopa-ecommerce-event-dispatcher-service
 
 ARG ECOMMERCE_EVENT_DISPATCHER_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_EVENT_DISPATCHER_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-event-dispatcher-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-event-dispatcher-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-payment-methods-service/Dockerfile.payment-methods-service b/pagopa-ecommerce-payment-methods-service/Dockerfile.payment-methods-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:4d7fe8d770483993c0cec264d49a573bac49e5239db47a9846572352e72da49c AS clone
 WORKDIR /workspace/pagopa-ecommerce-payment-methods-service
 
 ARG ECOMMERCE_PAYMENT_METHODS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_PAYMENT_METHODS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-payment-methods-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-payment-methods-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml clean package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-payment-requests-service/Dockerfile.payment-requests-service b/pagopa-ecommerce-payment-requests-service/Dockerfile.payment-requests-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:4d7fe8d770483993c0cec264d49a573bac49e5239db47a9846572352e72da49c AS clone
 WORKDIR /workspace/pagopa-ecommerce-payment-requests-service
 
 ARG ECOMMERCE_PAYMENT_REQUESTS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_PAYMENT_REQUESTS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-payment-requests-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-payment-requests-service
@@ -18,7 +18,7 @@ COPY --from=clone ${REPO}/ .
 RUN mvn -f ./pom.xml clean package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-transactions-scheduler-service/Dockerfile.transactions-scheduler-service b/pagopa-ecommerce-transactions-scheduler-service/Dockerfile.transactions-scheduler-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:4d7fe8d770483993c0cec264d49a573bac49e5239db47a9846572352e72da49c AS clone
 WORKDIR /workspace/pagopa-ecommerce-transactions-scheduler-service
 
 ARG ECOMMERCE_TRANSACTIONS_SCHEDULER_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_TRANSACTIONS_SCHEDULER_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-transactions-scheduler-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-transactions-scheduler-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-ecommerce-transactions-service/Dockerfile.transactions-service b/pagopa-ecommerce-transactions-service/Dockerfile.transactions-service
@@ -1,5 +1,5 @@
 ### 1. Cloning stage
-FROM alpine/git:latest AS clone
+FROM alpine/git:latest@sha256:4d7fe8d770483993c0cec264d49a573bac49e5239db47a9846572352e72da49c AS clone
 WORKDIR /workspace/pagopa-ecommerce-transactions-service
 
 ARG ECOMMERCE_TRANSACTIONS_COMMIT_SHA
@@ -9,7 +9,7 @@ RUN rm -rf * && \
     git checkout ${ECOMMERCE_TRANSACTIONS_COMMIT_SHA} 
 
 ### 2. Build stage
-FROM maven:3.8.3-openjdk-17 AS build
+FROM maven:3.8.3-openjdk-17@sha256:8a66581a077762c8752a9f64f73cdd8c59e9c4446eb810417119e0436b075931 AS build
 WORKDIR /workspace/pagopa-ecommerce-transactions-service/
 
 ARG REPO=/workspace/pagopa-ecommerce-transactions-service
@@ -19,7 +19,7 @@ RUN mvn -f ./pom.xml validate -DskipTests
 RUN mvn -f ./pom.xml package -DskipTests
 
 ### 3. Run stage
-FROM openjdk:17-slim
+FROM openjdk:17-slim@sha256:aaa3b3cb27e3e520b8f116863d0580c438ed55ecfa0bc126b41f68c3f62f9774
 
 RUN addgroup --system user && adduser --ingroup user --system user
 USER user:user

diff --git a/pagopa-notifications-service/Dockerfile.notifications-service b/pagopa-notifications-service/Dockerfile.notifications-service
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 
 ARG NOTIFICATIONS_SERVICE_COMMIT_SHA
 

diff --git a/pagopa-personal-data-vault-tokenizer/Dockerfile.pdv b/pagopa-personal-data-vault-tokenizer/Dockerfile.pdv
@@ -1,4 +1,4 @@
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 WORKDIR /usr/src/app
 
 COPY ./* /usr/src/app/

diff --git a/pgs-mock/Dockerfile.pgs-mock b/pgs-mock/Dockerfile.pgs-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/psp-mock/Dockerfile.psp-mock b/psp-mock/Dockerfile.psp-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app
 

diff --git a/wallet-mock/Dockerfile.wallet-mock b/wallet-mock/Dockerfile.wallet-mock
@@ -1,4 +1,4 @@
-FROM node:18.19.0-alpine
+FROM node:18.19.0-alpine@sha256:0085670310d2879621f96a4216c893f92e2ded827e9e6ef8437672e1bd72f437
 
 WORKDIR /usr/src/app