✨ Use local dockerfile instead of pre-built image (#38)

* use dockerfile * update hash
ossf · Jan 4, 2022 · db8ccbd · db8ccbd
1 parent 2b1a2f9
commit db8ccbd
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 46 deletions.
diff --git a/.github/workflows/docker-sign.yml b/.github/workflows/docker-sign.yml
diff --git a/Dockerfile b/Dockerfile
@@ -21,8 +21,7 @@
 #           -e INPUT_REPO_TOKEN=$GITHUB_AUTH_TOKEN \
 #           -e GITHUB_REPOSITORY="ossf/scorecard" \
 #           laurentsimon/scorecard-action:latest
-ARG DOCKER_SHA
-FROM gcr.io/openssf/scorecard@sha256:${DOCKER_SHA} as base
+FROM gcr.io/openssf/scorecard@sha256:988824994c6c8929bd2bc2e119e19139ef8ea8d684e89d722054ada03afad538 as base
 
 # Build our image and update the root certs.
 # TODO: use distroless.

diff --git a/action.yaml b/action.yaml
@@ -42,5 +42,5 @@ branding:
 
 runs:
   using: "docker"
-  image: "docker://laurentsimon/scorecard-action:latest"
+  image: "./Dockerfile"