Compare commits

...

2 commits

Author SHA1 Message Date
waja 2ad3830fdc
Merge 7c22dd8656 into 9b2793a808 2025-10-20 08:36:20 +02:00
Jan Wagner 7c22dd8656 Adding --checksum to avoid CIS-DI-0009
Add hadolint inline ignore to prevent ignoring it globally
2025-07-18 18:23:46 +02:00

View file

@ -46,8 +46,10 @@ RUN \
ARG FROM ARG FROM
FROM ${FROM} AS main FROM ${FROM} AS main
ARG NGINX_KEYRING_SHA256_SUM=7d3d5a7adf37e17d6882e2f6f55324b9a8f978ef3c99c50fe801af67c9847c91
# hadolint ignore=DL3020
ADD --chown=0:0 --chmod=444 --checksum=sha256:${NGINX_KEYRING_SHA256_SUM} https://unit.nginx.org/keys/nginx-keyring.gpg /usr/share/keyrings/nginx-keyring.gpg
COPY docker/unit.list /etc/apt/sources.list.d/unit.list COPY docker/unit.list /etc/apt/sources.list.d/unit.list
ADD --chmod=444 --chown=0:0 https://unit.nginx.org/keys/nginx-keyring.gpg /usr/share/keyrings/nginx-keyring.gpg
RUN export DEBIAN_FRONTEND=noninteractive \ RUN export DEBIAN_FRONTEND=noninteractive \
&& apt-get update -qq \ && apt-get update -qq \
&& apt-get upgrade \ && apt-get upgrade \