Update Distroless to Debian 12 (#3432)

gcr.io/distroless/static is Debian 10, which is quite outdated. Updated to the Debian 12 version of the static image, and used the nonroot tag since the root user isn't needed.

We've been running a version of Dex in production with this image without issue.

Signed-off-by: Hayden B <hblauzvern@google.com>
This commit is contained in:
Hayden B
2024-03-28 20:46:05 +01:00
committed by GitHub
parent 8755308759
commit 38cef0c0c0
+1 -1
View File
@@ -55,7 +55,7 @@ RUN wget -O /usr/local/bin/gomplate \
# For Dependabot to detect base image versions
FROM alpine:3.19.1@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS alpine
FROM gcr.io/distroless/static:latest@sha256:7e5c6a2a4ae854242874d36171b31d26e0539c98fc6080f942f16b03e82851ab AS distroless
FROM gcr.io/distroless/static-debian12:nonroot@sha256:67686c9070e7179449c73943d89160c4834c0b4a969434022e11c5b9a8dc6131 AS distroless
FROM $BASE_IMAGE