From ffbad3d87d972b326f29b7326d05802b9249f760 Mon Sep 17 00:00:00 2001 From: Ain Tohvri Date: Tue, 18 Aug 2026 22:05:20 +0200 Subject: [PATCH] Pin Falco and Go base image versions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The image built both halves from floating references: `golang:latest` and `falco@latest`. A release on either side could change what the action does with no change in this repository, so pin both. Falco is pinned to v1.21.1. Upstream tags v2.x, but its go.mod still declares the unsuffixed module path `github.com/ysugimoto/falco`, so `go install` cannot resolve those tags at all — `@latest` was already resolving to v1.21.1 and a `@v2.x.y` pin fails outright. The pin therefore freezes what was being installed rather than changing it. The base image is pinned to golang:1.26.6, which satisfies the `go 1.24.3` that Falco v1.21.1 requires. 🤖 Assisted-by: Claude --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 3e4d498..c208225 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,9 +1,9 @@ -FROM golang:latest +FROM golang:1.26.6 LABEL org.opencontainers.image.authors="Ain Tohvri " \ - org.opencontainers.image.version="1.1.0" + org.opencontainers.image.version="1.1.1" -RUN go install github.com/ysugimoto/falco/cmd/falco@latest +RUN go install github.com/ysugimoto/falco/cmd/falco@v1.21.1 COPY entrypoint.sh /entrypoint.sh