Add sha1 reference for docker images (Security)

step-security-bot · freddidierRTE · commit 8d57725e2699 · 2024-03-01T14:13:04.000+01:00
Signed-off-by: freddidierRTE &lt;frederic-f.didier@rte-france.com&gt;
diff --git a/node-services/cards-external-diffusion/Dockerfile b/node-services/cards-external-diffusion/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.11.1-alpine
+FROM node:20.11.1-alpine@sha256:c0a3badbd8a0a760de903e00cedbca94588e609299820557e72cba2a53dbaa2c
 WORKDIR /usr/app
 RUN chown node:node /usr/app
 RUN mkdir -m777 /var/log/opfab
diff --git a/node-services/cards-reminder/Dockerfile b/node-services/cards-reminder/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.11.1-alpine
+FROM node:20.11.1-alpine@sha256:c0a3badbd8a0a760de903e00cedbca94588e609299820557e72cba2a53dbaa2c
 RUN apk add --no-cache tzdata
 WORKDIR /usr/app
 RUN chown node:node /usr/app
diff --git a/node-services/supervisor/Dockerfile b/node-services/supervisor/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.11.1-alpine
+FROM node:20.11.1-alpine@sha256:c0a3badbd8a0a760de903e00cedbca94588e609299820557e72cba2a53dbaa2c
 WORKDIR /usr/app
 RUN chown node:node /usr/app
 RUN mkdir -m777 /var/log/opfab
diff --git a/rabbitmq/Dockerfile b/rabbitmq/Dockerfile
@@ -1 +1 @@
-FROM rabbitmq:3.13.0-management
+FROM rabbitmq:3.13.0-management@sha256:e3953d1821905aea159c7467607a93e2fea07ad21978db30dec4433ef5b44770
diff --git a/services/businessconfig/Dockerfile b/services/businessconfig/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 RUN apk --no-cache add bash
diff --git a/services/cards-consultation/Dockerfile b/services/cards-consultation/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 RUN apk --no-cache add bash
diff --git a/services/cards-publication/Dockerfile b/services/cards-publication/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 RUN apk --no-cache add bash
diff --git a/services/external-devices/Dockerfile b/services/external-devices/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 RUN apk --no-cache add bash
diff --git a/services/users/Dockerfile b/services/users/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 RUN apk --no-cache add bash
diff --git a/src/test/dummyModbusDevice/Dockerfile b/src/test/dummyModbusDevice/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 ARG JAR_FILE
 COPY build/libs/${JAR_FILE} app.jar
diff --git a/src/test/externalApp/Dockerfile b/src/test/externalApp/Dockerfile
@@ -1,4 +1,4 @@
-FROM azul/zulu-openjdk-alpine:17.0.10-jre
+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36
 VOLUME /tmp
 RUN env
 ARG JAR_FILE
diff --git a/src/tooling/migration-entity-roles/Dockerfile b/src/tooling/migration-entity-roles/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.11.0-alpine
+FROM node:20.11.0-alpine@sha256:2f46fd49c767554c089a5eb219115313b72748d8f62f5eccb58ef52bc36db4ad
 WORKDIR /usr/app
 COPY ./ ./
 RUN npm install 
diff --git a/src/tooling/migration-opfab3/Dockerfile b/src/tooling/migration-opfab3/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20.11.0-alpine
+FROM node:20.11.0-alpine@sha256:2f46fd49c767554c089a5eb219115313b72748d8f62f5eccb58ef52bc36db4ad
 COPY package.json /
 RUN npm install
 COPY migration-opfab3.js /
diff --git a/ui/main/Dockerfile b/ui/main/Dockerfile
@@ -1,4 +1,4 @@
-FROM nginx:1.25.4-alpine
+FROM nginx:1.25.4-alpine@sha256:6a2f8b28e45c4adea04ec207a251fd4a2df03ddc930f782af51e315ebc76e9a9
 VOLUME /tmp
 RUN apk --no-cache add bash logrotate
 # del unused lib for security reason 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20.11.1-alpine`
	`1`	`+FROM node:20.11.1-alpine@sha256:c0a3badbd8a0a760de903e00cedbca94588e609299820557e72cba2a53dbaa2c`
`2`	`2`	`WORKDIR /usr/app`
`3`	`3`	`RUN chown node:node /usr/app`
`4`	`4`	`RUN mkdir -m777 /var/log/opfab`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM rabbitmq:3.13.0-management`
	`1`	`+FROM rabbitmq:3.13.0-management@sha256:e3953d1821905aea159c7467607a93e2fea07ad21978db30dec4433ef5b44770`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM azul/zulu-openjdk-alpine:17.0.10-jre`
	`1`	`+FROM azul/zulu-openjdk-alpine:17.0.10-jre@sha256:2dac0b864788dbfd161391de56db478bb016972283a3f86bdd31dfbb28939c36`
`2`	`2`	`VOLUME /tmp`
`3`	`3`	`ARG JAR_FILE`
`4`	`4`	`RUN apk --no-cache add bash`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20.11.0-alpine`
	`1`	`+FROM node:20.11.0-alpine@sha256:2f46fd49c767554c089a5eb219115313b72748d8f62f5eccb58ef52bc36db4ad`
`2`	`2`	`WORKDIR /usr/app`
`3`	`3`	`COPY ./ ./`
`4`	`4`	`RUN npm install`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM nginx:1.25.4-alpine`
	`1`	`+FROM nginx:1.25.4-alpine@sha256:6a2f8b28e45c4adea04ec207a251fd4a2df03ddc930f782af51e315ebc76e9a9`
`2`	`2`	`VOLUME /tmp`
`3`	`3`	`RUN apk --no-cache add bash logrotate`
`4`	`4`	`# del unused lib for security reason`