Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -242,7 +242,7 @@
<plugin>
<groupId>com.google.cloud.tools</groupId>
<artifactId>jib-maven-plugin</artifactId>
<version>3.4.6</version>
<version>3.5.1</version>
<dependencies>
<!-- This isn't strictly needed but makes sense to include -->
<dependency>
Expand All @@ -260,7 +260,7 @@
</pluginExtension>
</pluginExtensions>
<from>
<image>gcr.io/distroless/java21-debian12</image>
<image>gcr.io/distroless/java21-debian13</image>
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The base image is referenced by a floating tag (gcr.io/distroless/java21-debian13), which makes builds non-reproducible and can increase supply-chain risk if the tag is repointed. Consider pinning the base image by digest (optionally alongside the tag) so rebuilds always use the intended image content.

Suggested change
<image>gcr.io/distroless/java21-debian13</image>
<image>gcr.io/distroless/java21-debian13@sha256:0000000000000000000000000000000000000000000000000000000000000000</image>

Copilot uses AI. Check for mistakes.
<platforms>
<platform>
<architecture>arm64</architecture>
Expand Down
Loading