From 00b2bc798a81dd62c6acea0ca8a733b318d9c37f Mon Sep 17 00:00:00 2001 From: GitHub Actions Date: Sun, 30 Nov 2025 00:36:20 +0000 Subject: [PATCH] chore(docker): pin golang base images to 1.25.4-alpine to satisfy hadolint DL3006 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 21e1e6c7..0e34244c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -48,7 +48,7 @@ RUN --mount=type=cache,target=/app/frontend/node_modules/.cache \ npm run build # ---- Backend Builder ---- -FROM --platform=$BUILDPLATFORM golang:alpine AS backend-builder +FROM --platform=$BUILDPLATFORM golang:1.25.4-alpine AS backend-builder # Copy xx helpers for cross-compilation COPY --from=xx / / @@ -98,7 +98,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \ # ---- Caddy Builder ---- # Build Caddy from source to ensure we use the latest Go version and dependencies # This fixes vulnerabilities found in the pre-built Caddy images (e.g. CVE-2025-59530, stdlib issues) -FROM --platform=$BUILDPLATFORM golang:alpine AS caddy-builder +FROM --platform=$BUILDPLATFORM golang:1.25.4-alpine AS caddy-builder ARG TARGETOS ARG TARGETARCH ARG CADDY_VERSION