From f95fdb38109d559d642a6d32f11fde84eb212dd2 Mon Sep 17 00:00:00 2001 From: "red-hat-konflux[bot]" <126015336+red-hat-konflux[bot]@users.noreply.github.com> Date: Mon, 29 Jun 2026 14:56:05 +0000 Subject: [PATCH] chore(deps): update docker images Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> --- Dockerfile | 4 ++-- Dockerfile.backfill-redis.rh | 4 ++-- Dockerfile.rekor-cli.rh | 4 ++-- Dockerfile.rekor-server.rh | 8 ++++---- Dockerfile.trillian-log-server | 2 +- Dockerfile.trillian-log-signer | 2 +- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/Dockerfile b/Dockerfile index 84b4f5291..c42806c2e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS builder +FROM golang:1.26.4@sha256:32c0e6e5c4f6707717051091b4d0b077464a679eaab563e11474efc5328e2aa5 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT @@ -31,7 +31,7 @@ RUN CGO_ENABLED=0 go build -gcflags "all=-N -l" -ldflags "${SERVER_LDFLAGS}" -o RUN go test -c -ldflags "${SERVER_LDFLAGS}" -cover -covermode=count -coverpkg=./... -o rekor-server_test ./cmd/rekor-server # Multi-Stage production build -FROM golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS deploy +FROM golang:1.26.4@sha256:32c0e6e5c4f6707717051091b4d0b077464a679eaab563e11474efc5328e2aa5 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/rekor-server /usr/local/bin/rekor-server diff --git a/Dockerfile.backfill-redis.rh b/Dockerfile.backfill-redis.rh index 30ad06d43..d337ce87b 100644 --- a/Dockerfile.backfill-redis.rh +++ b/Dockerfile.backfill-redis.rh @@ -1,6 +1,6 @@ # Build stage -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 AS build-env ENV GOEXPERIMENT=strictfipsruntime ENV CGO_ENABLED=1 @@ -18,7 +18,7 @@ ARG SERVER_LDFLAGS RUN go build -mod=readonly -trimpath -ldflags "$(SERVER_LDFLAGS)" -o backfill-redis ./cmd/backfill-index # Install stage -FROM registry.redhat.io/rhel9/redis-6@sha256:1f29a65a7db2a0cb53661b4c260482f0402b595587eed3840a0f980bc71695da +FROM registry.redhat.io/rhel9/redis-6@sha256:3a243218d38169a179692f76d050ac5226984d62c968b444c666ab7ecfa06317 COPY --from=build-env /opt/app-root/src/backfill-redis /usr/local/bin/backfill-redis COPY LICENSE /licenses/license.txt WORKDIR /opt/app-root/src/home diff --git a/Dockerfile.rekor-cli.rh b/Dockerfile.rekor-cli.rh index fd1412480..0e06e6822 100644 --- a/Dockerfile.rekor-cli.rh +++ b/Dockerfile.rekor-cli.rh @@ -1,5 +1,5 @@ #Build stage# -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 AS build-env ENV GOEXPERIMENT=strictfipsruntime ENV CGO_ENABLED=1 USER root @@ -31,7 +31,7 @@ RUN git update-index --assume-unchanged Dockerfile.rekor-cli.rh && \ git update-index --no-assume-unchanged Dockerfile.rekor-cli.rh #Install stage -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:c5478a52c410e71c53839923c83a1480199a1e74ce5736fe3e3a5578dc399102 LABEL description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." LABEL io.k8s.description="Rekor-cli is a command line interface (CLI) tool used to interact with a rekor server." diff --git a/Dockerfile.rekor-server.rh b/Dockerfile.rekor-server.rh index f6f9c35a4..1cacdeef0 100644 --- a/Dockerfile.rekor-server.rh +++ b/Dockerfile.rekor-server.rh @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 AS build-env RUN mkdir -p /opt/app-root && mkdir -p /opt/app-root/src && mkdir -p /opt/app-root/src/cmd && mkdir -p /opt/app-root/src/pkg && git config --global --add safe.directory /opt/app-root/src @@ -36,13 +36,13 @@ RUN go build -gcflags "all=-N -l" -ldflags "${SERVER_LDFLAGS}" -o rekor-server_d RUN go test -c -ldflags "${SERVER_LDFLAGS}" -cover -covermode=count -coverpkg=./... -o rekor-server_test -mod=readonly ./cmd/rekor-server # debug compile options & debugger -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 as debug +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 as debug RUN go install github.com/go-delve/delve/cmd/dlv@v1.8.0 # overwrite server and include debugger COPY --from=build-env /opt/app-root/src/rekor-server_debug /usr/local/bin/rekor-server -FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 as test +FROM registry.redhat.io/ubi9/go-toolset:9.8-1782736563@sha256:83cfd595f20e494cea9dc6526f217441e60bb9c5da85b33157c761e5f6a3d852 as test USER root @@ -61,7 +61,7 @@ RUN mkdir -p /var/run/attestations && \ COPY --from=build-env /opt/app-root/src/rekor-server_test /usr/local/bin/rekor-server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:5b74fce9d6e629942a0c6dc0f546c193e70d7f974d999a48c948c53dd3d36362 as deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:c5478a52c410e71c53839923c83a1480199a1e74ce5736fe3e3a5578dc399102 as deploy LABEL description="Rekor aims to provide an immutable, tamper-resistant ledger of metadata generated within a software project’s supply chain." LABEL io.k8s.description="Rekor-Server provides a tamper resistant ledger." diff --git a/Dockerfile.trillian-log-server b/Dockerfile.trillian-log-server index 2925139f0..c485d5ece 100644 --- a/Dockerfile.trillian-log-server +++ b/Dockerfile.trillian-log-server @@ -14,7 +14,7 @@ FROM ghcr.io/sigstore/scaffolding/trillian_log_server:v1.7.2@sha256:d953a8eb3f9311e55ebee754de234f1f63e4db2d5e76c15326c288fb0887bb11 AS server -FROM golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS deploy +FROM golang:1.26.4@sha256:32c0e6e5c4f6707717051091b4d0b077464a679eaab563e11474efc5328e2aa5 AS deploy COPY --from=server /ko-app/trillian_log_server /usr/local/bin/trillian-log-server diff --git a/Dockerfile.trillian-log-signer b/Dockerfile.trillian-log-signer index 2b61d7e18..c46907c51 100644 --- a/Dockerfile.trillian-log-signer +++ b/Dockerfile.trillian-log-signer @@ -14,7 +14,7 @@ FROM ghcr.io/sigstore/scaffolding/trillian_log_signer:v1.7.2@sha256:51631983a7e6f0b3faeb188c590e65b9793a6a6617e0631f8b4fd68e98d0460e AS server -FROM golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS deploy +FROM golang:1.26.4@sha256:32c0e6e5c4f6707717051091b4d0b077464a679eaab563e11474efc5328e2aa5 AS deploy COPY --from=server /ko-app/trillian_log_signer /usr/local/bin/trillian-log-signer