Mouws/protonmail-bridge-nextcoud-podman
1
0
Fork 1
mirror of https://github.com/shenxn/protonmail-bridge-docker.git synced 2026-03-26 21:35:58 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Pin base image digests and add Renovate for automated updates

Browse Source 
Renovate will open PRs automatically when debian:bookworm-slim or
debian:sid-slim receive updates (e.g. security patches), keeping the
container current without relying solely on scheduled rebuilds.
This commit is contained in:
Dan C Williams 2026-02-26 11:53:35 -06:00
parent 160d10da37
commit 82bd9081c8
3 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/build.yaml vendored
View File

@ -98,9 +98,9 @@ jobs:
echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
# debian:bookworm-slim has no riscv64 image; fall back to sid-slim for that platform # debian:bookworm-slim has no riscv64 image; fall back to sid-slim for that platform
if [ "$platform" = "linux/riscv64" ]; then if [ "$platform" = "linux/riscv64" ]; then
echo "RUNTIME_IMAGE=debian:sid-slim" >> $GITHUB_ENV echo "RUNTIME_IMAGE=debian:sid-slim@sha256:a145cf2bc72431523b8f5d152e9cbcc20cfaeccdb7626802f5ce6fb31a6f58bb" >> $GITHUB_ENV
else else
echo "RUNTIME_IMAGE=debian:bookworm-slim" >> $GITHUB_ENV echo "RUNTIME_IMAGE=debian:bookworm-slim@sha256:74a21da88cf4b2e8fde34558376153c5cd80b00ca81da2e659387e76524edc73" >> $GITHUB_ENV
fi fi
- name: Set version - name: Set version

4
build/Dockerfile
View File

@ -1,10 +1,10 @@
# ARG before any FROM is global and available in FROM instructions. # ARG before any FROM is global and available in FROM instructions.
# debian:bookworm-slim is the default; the workflow overrides to debian:sid-slim for riscv64 # debian:bookworm-slim is the default; the workflow overrides to debian:sid-slim for riscv64
# since bookworm has no riscv64 image. # since bookworm has no riscv64 image.
ARG RUNTIME_IMAGE=debian:bookworm-slim ARG RUNTIME_IMAGE=debian:bookworm-slim@sha256:74a21da88cf4b2e8fde34558376153c5cd80b00ca81da2e659387e76524edc73
# debian:sid-slim is required for the build stage to support riscv64 (golang:bookworm does not). # debian:sid-slim is required for the build stage to support riscv64 (golang:bookworm does not).
FROM debian:sid-slim AS build FROM debian:sid-slim@sha256:a145cf2bc72431523b8f5d152e9cbcc20cfaeccdb7626802f5ce6fb31a6f58bb AS build
ARG version ARG version

15
renovate.json Normal file
View File

@ -0,0 +1,15 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:recommended"],
"docker": {
"pinDigests": true
},
"packageRules": [
{
"matchManagers": ["dockerfile"],
"matchPackageNames": ["debian"],
"commitMessageTopic": "debian base image",
"schedule": ["at any time"]
}
]
}