Update docker container version in /tools/AttackSurfaceAnalyzer#27053
Update docker container version in /tools/AttackSurfaceAnalyzer#27053adityapatwardhan wants to merge 1 commit intomasterfrom
Conversation
There was a problem hiding this comment.
Pull request overview
Updates the pinned base image digest used by the AttackSurfaceAnalyzer Windows container, keeping the ASA test environment aligned with the intended dotnet/sdk:9.0-windowsservercore-ltsc2022 image while maintaining reproducible builds via digest pinning.
Changes:
- Updated the
mcr.microsoft.com/dotnet/sdk:9.0-windowsservercore-ltsc2022image SHA256 digest used for theasa-runnerstage.
You can also share your feedback on Copilot code review. Take the survey.
|
|
||
| # Stage 1: Test execution environment | ||
| FROM mcr.microsoft.com/dotnet/sdk:9.0-windowsservercore-ltsc2022@sha256:28f3a59216a7f91dfc4730ea47e236e2ffbb519975725bf8231f57e69dab3ca8 AS asa-runner | ||
| FROM mcr.microsoft.com/dotnet/sdk:9.0-windowsservercore-ltsc2022@sha256:cb171fbed1d295688e8feb0df50fc7a21e4ed2fc4b02718370a37a6950fa43a9 AS asa-runner |
There was a problem hiding this comment.
Checking on https://mcr.microsoft.com/en-us/artifact/mar/dotnet/sdk/tag/9.0-windowsservercore-ltsc2022 it seems the current & only sha256 hash is
sha256:b884c6c8d4a997483b54e46b966a3bb36fc129c8375fb857934360f4f1b8b77c
Unless you are seeing otherwise via other tooling at all
| FROM mcr.microsoft.com/dotnet/sdk:9.0-windowsservercore-ltsc2022@sha256:cb171fbed1d295688e8feb0df50fc7a21e4ed2fc4b02718370a37a6950fa43a9 AS asa-runner | |
| FROM mcr.microsoft.com/dotnet/sdk:9.0-windowsservercore-ltsc2022@sha256:b884c6c8d4a997483b54e46b966a3bb36fc129c8375fb857934360f4f1b8b77c AS asa-runner |
daxian-dbw
left a comment
There was a problem hiding this comment.
@adityapatwardhan Does this PR need to be backported to release branches?
|
This pull request has been automatically marked as Review Needed because it has been there has not been any activity for 7 days. |
PR Summary
This pull request updates the Docker base image used for the test execution environment in
tools/AttackSurfaceAnalyzer/docker/Dockerfile. The change switches to a newer image digest, which may include important security patches or improvements.Docker image update:
asa-runnerfrom digest28f3a59216a7f91dfc4730ea47e236e2ffbb519975725bf8231f57e69dab3ca8tocb171fbed1d295688e8feb0df50fc7a21e4ed2fc4b02718370a37a6950fa43a9inDockerfile, ensuring the environment uses the latest available version.PR Context
ADO CoPilot suggestion
PR Checklist
.h,.cpp,.cs,.ps1and.psm1files have the correct copyright header