From f76dab1184bf54c960f1a3d4611854eeac2cbc9c Mon Sep 17 00:00:00 2001 From: devitway Date: Wed, 18 Mar 2026 13:20:35 +0000 Subject: [PATCH] fix: pin ClusterFuzzLite base image by SHA, fix Docker tag double-suffix --- .clusterfuzzlite/Dockerfile | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.clusterfuzzlite/Dockerfile b/.clusterfuzzlite/Dockerfile index 81d208f..c6a4608 100644 --- a/.clusterfuzzlite/Dockerfile +++ b/.clusterfuzzlite/Dockerfile @@ -1,4 +1,4 @@ -FROM rust:1.87-slim +FROM rust:1.87-slim@sha256:437507c3e719e4f968033b88d851ffa9f5aceeb2dcc2482cc6cb7647811a55eb RUN apt-get update && apt-get install -y build-essential pkg-config && rm -rf /var/lib/apt/lists/* RUN cargo install cargo-fuzz diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 385415f..acee473 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -90,7 +90,7 @@ jobs: tags: | type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} - type=raw,value=redos + type=raw,value=latest - name: Build and push (redos) uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 @@ -116,7 +116,7 @@ jobs: tags: | type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} - type=raw,value=astra + type=raw,value=latest - name: Build and push (astra) uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7