Pin Docker base image in Dockerfile

[atomist]

This pull request pins the Docker base image node:8-slim in Dockerfile to the current digest.

ben-security-tests/Dockerfile

Line 1 in e991085

FROM node:8-slim@sha256:6f47d69e8deac79b425d3f5d49ee0f804dbfb07bfc0f8ee8688c1bff0fb50448

Digest sha256:6f47d69e8deac79b425d3f5d49ee0f804dbfb07bfc0f8ee8688c1bff0fb50448 references a multi-CPU architecture image manifest. This image supports the following architectures:

• sha256:7900ad4a651b0aee05cd962e86fba4863b836875ebea79dc30cbef49511819af linux/386
• sha256:57250a2fbc27ae353a8b40e7832f4ee635afdf7f751f9468cc7a4bfffd5aff62 linux/amd64
• sha256:cdac11678e71ffe7a54136e9172a25620c9c20b9e86f8da0f0f2b7ec5642b27a linux/arm/v7
• sha256:8ef9e79ebe0ea556f315ae1acd7400914db5d0bed53f170695130bc1a1c2a1b2 linux/arm64/v8
• sha256:f3f0231d620c726cb1339f6cb36fbb3cd7a624854697f6f438ac4404f7923797 linux/ppc64le
• sha256:7290a1347dcd8a69264862f5d0471c2b958d3dda9dc3b3ad499f71259668f19f linux/s390x

---

Pinning FROM lines to digests makes your builds repeatable. Atomist will raise new pull requests whenever the tag moves, so that you know when the base image has been updated. You can follow a new tag at any time. Just replace the digest with the new tag you want to follow. Atomist, will switch to following this new tag.

---

File changed:

• Dockerfile

---

_{atomist/docker-base-image-policy · Configure}