Repository navigation
fix(dev-box): pin image by digest - #170
Merged
Merged
Conversation
Pin the first published build (sha-5a930ae, from the #169 merge) so the attested app-compose identifies the exact image instead of a moving :latest tag. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Follow-up to #169. The compose file used
ghcr.io/dstack-tee/dstack-dev-box:latest. With a moving tag, the attestedapp-composedoesn't say which image actually runs. This pins the first published build:sha-5a930aeis the #169 merge commit's build and currently the same image aslatest.Verification
build-dev-boxworkflow onmainsucceeded for 5a930aedocker pullwith an empty Docker config workslatestandsha-5a930aeresolve to the same index digestsshd,nsenter,rsync,vim,docker,host-shell,entrypoint./dev.sh validate dev-boxandyamllintpass🤖 Generated with Claude Code