Adding --checksum to avoid CIS-DI-0009

Add hadolint inline ignore to prevent ignoring it globally
Merge pull request #1450 from netbox-community/develop
2025-12-10 13:52:38 +00:00 · 2025-05-16 15:47:14 +02:00 · 2025-05-05 07:51:26 +02:00
1 changed files with 3 additions and 1 deletions
--- a/4
+++ b/4
@ -46,8 +46,10 @@ RUN \
 ARG FROM
 FROM ${FROM} AS main

+ARG NGINX_KEYRING_SHA256_SUM=7d3d5a7adf37e17d6882e2f6f55324b9a8f978ef3c99c50fe801af67c9847c91
+# hadolint ignore=DL3020
+ADD --chown=0:0 --chmod=444 --checksum=sha256:${NGINX_KEYRING_SHA256_SUM} https://unit.nginx.org/keys/nginx-keyring.gpg /usr/share/keyrings/nginx-keyring.gpg
 COPY docker/unit.list /etc/apt/sources.list.d/unit.list
-ADD --chmod=444 --chown=0:0 https://unit.nginx.org/keys/nginx-keyring.gpg /usr/share/keyrings/nginx-keyring.gpg
 RUN export DEBIAN_FRONTEND=noninteractive \
    && apt-get update -qq \
    && apt-get upgrade \
Author	SHA1	Message	Date
Jan Wagner	7bc4d78388	Adding --checksum to avoid CIS-DI-0009 Add hadolint inline ignore to prevent ignoring it globally	2025-05-16 15:47:14 +02:00
Tobias Genannt	477decd80a	Merge pull request #1450 from netbox-community/develop Version 3.3.0	2025-05-05 07:51:26 +02:00