fix: pin docker image (#179)

DoodleScheduling · Aug 21, 2024 · 68c20aa · 68c20aa
1 parent bd1fc44
commit 68c20aa
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
@@ -3,8 +3,12 @@ on:
   release:
     types: [published]
 
+permissions: {}
+
 jobs:
   publish-release:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: Actions-R-Us/actions-tagger@330ddfac760021349fef7ff62b372f2f691c20fb # v2.0.3
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -98,7 +98,6 @@ signs:
 - cmd: cosign
   certificate: "${artifact}.pem"
   env:
-  - GITHUB_TEOKN=$RUNNER_TOKEN
   - COSIGN_EXPERIMENTAL=1
   args:
   - sign-blob

diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM gcr.io/distroless/static:latest
+FROM gcr.io/distroless/static:latest@sha256:ce46866b3a5170db3b49364900fb3168dc0833dfb46c26da5c77f22abb01d8c3
 WORKDIR /
 COPY flux-build flux-build