try pinning docker image to sha

shenanigansd · shenanigansd · commit 55630e84af4c · 2023-02-28T19:30:26.000-06:00
Signed-off-by: Bradley Reynolds &lt;bradley.reynolds@darbia.dev&gt;
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 python:slim-bullseye
+FROM --platform=linux/amd64 python:3.11-slim@sha256:66e41d125c90d679ad69b264ac7b78a3bd27e7510b63ba5987ad42678bbefc32
 
 # Set Git SHA environment variable
 ARG git_sha="development"
diff --git a/docs/source/changelog.rst b/docs/source/changelog.rst
@@ -4,6 +4,9 @@
 Changelog
 =========
 
+- :release:`1.5.0 <28th February 2023>`
+- :feature:`17` Pin the Docker image to a specific SHA-256 digest to help with reproducible builds
+
 - :release:`1.4.0 <20th February 2023>`
 - :feature:`13` Actually add ``GIT_SHA`` to ``Dockerfile``
 
diff --git a/src/api/__init__.py b/src/api/__init__.py
@@ -1,3 +1,3 @@
 """Public API for our projects"""
 
-__version__ = "1.4.0"
+__version__ = "1.5.0"

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM --platform=linux/amd64 python:slim-bullseye`
	`1`	`+FROM --platform=linux/amd64 python:3.11-slim@sha256:66e41d125c90d679ad69b264ac7b78a3bd27e7510b63ba5987ad42678bbefc32`
`2`	`2`
`3`	`3`	`# Set Git SHA environment variable`
`4`	`4`	`ARG git_sha="development"`