From 725fdb9b1e33a66f8e46f91eb144f746b18fa32a Mon Sep 17 00:00:00 2001
From: Michal Babej <michal.babej@intel.com>
Date: Mon, 7 Oct 2024 16:57:55 +0300
Subject: [PATCH] GH workflows: pin docker images

---
 tools/docker/ArchLinux/default.dockerfile  | 2 +-
 tools/docker/ArchLinux/distro.dockerfile   | 2 +-
 tools/docker/Ubuntu/22_04.dockerfile       | 2 +-
 tools/docker/Ubuntu/24_04.dockerfile       | 2 +-
 tools/docker/Ubuntu/conformance.dockerfile | 4 +---
 tools/docker/Ubuntu/distro.dockerfile      | 2 +-
 6 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/tools/docker/ArchLinux/default.dockerfile b/tools/docker/ArchLinux/default.dockerfile
index a9c338a10..2c8c3a89c 100644
--- a/tools/docker/ArchLinux/default.dockerfile
+++ b/tools/docker/ArchLinux/default.dockerfile
@@ -1,4 +1,4 @@
-FROM library/archlinux:latest
+FROM library/archlinux:latest@sha256:c8501ab8b970205491501ba01d9bce9a04d70537fc15596360f1ce1011b08569
 ARG GIT_COMMIT=main
 LABEL git-commit=$GIT_COMMIT vendor=pocl distro=Arch version=1.0
 
diff --git a/tools/docker/ArchLinux/distro.dockerfile b/tools/docker/ArchLinux/distro.dockerfile
index 4c80b95e4..c0dbc5f7d 100644
--- a/tools/docker/ArchLinux/distro.dockerfile
+++ b/tools/docker/ArchLinux/distro.dockerfile
@@ -1,4 +1,4 @@
-FROM library/archlinux:latest
+FROM library/archlinux:latest@sha256:c8501ab8b970205491501ba01d9bce9a04d70537fc15596360f1ce1011b08569
 ARG GIT_COMMIT=main
 LABEL git-commit=$GIT_COMMIT vendor=pocl distro=Arch version=1.0
 
diff --git a/tools/docker/Ubuntu/22_04.dockerfile b/tools/docker/Ubuntu/22_04.dockerfile
index 12b1e714e..3d7510144 100644
--- a/tools/docker/Ubuntu/22_04.dockerfile
+++ b/tools/docker/Ubuntu/22_04.dockerfile
@@ -1,4 +1,4 @@
-FROM amd64/ubuntu:22.04
+FROM amd64/ubuntu:22.04@sha256:3d1556a8a18cf5307b121e0a98e93f1ddf1f3f8e092f1fddfd941254785b95d7
 
 ARG GIT_COMMIT=main
 ARG GH_PR
diff --git a/tools/docker/Ubuntu/24_04.dockerfile b/tools/docker/Ubuntu/24_04.dockerfile
index 9c933b045..6c635d5bf 100644
--- a/tools/docker/Ubuntu/24_04.dockerfile
+++ b/tools/docker/Ubuntu/24_04.dockerfile
@@ -1,4 +1,4 @@
-FROM amd64/ubuntu:24.04
+FROM amd64/ubuntu:24.04@sha256:74f92a6b3589aa5cac6028719aaac83de4037bad4371ae79ba362834389035aa
 
 ARG GIT_COMMIT=main
 ARG GH_PR
diff --git a/tools/docker/Ubuntu/conformance.dockerfile b/tools/docker/Ubuntu/conformance.dockerfile
index 3af7ff0eb..be4681fa8 100644
--- a/tools/docker/Ubuntu/conformance.dockerfile
+++ b/tools/docker/Ubuntu/conformance.dockerfile
@@ -1,6 +1,4 @@
-###################
-
-FROM amd64/ubuntu:24.04
+FROM amd64/ubuntu:24.04@sha256:74f92a6b3589aa5cac6028719aaac83de4037bad4371ae79ba362834389035aa
 
 ARG GIT_COMMIT=main
 ARG GH_PR
diff --git a/tools/docker/Ubuntu/distro.dockerfile b/tools/docker/Ubuntu/distro.dockerfile
index c77706c08..e34fde4ca 100644
--- a/tools/docker/Ubuntu/distro.dockerfile
+++ b/tools/docker/Ubuntu/distro.dockerfile
@@ -1,4 +1,4 @@
-FROM amd64/ubuntu:24.04
+FROM amd64/ubuntu:24.04@sha256:74f92a6b3589aa5cac6028719aaac83de4037bad4371ae79ba362834389035aa
 
 ARG GIT_COMMIT=main
 ARG GH_PR
-- 
GitLab