Martin Vogel 1f50c9d46c build(test-infra): pin container base images and package downloads by hash ...

Resolves the two open Pinned-Dependencies code-scanning alerts (and one
sibling the scanner had not flagged yet):

- ubuntu:noble in Dockerfile and Dockerfile.lint is pinned to its
  multi-arch manifest-list digest (verified against the registry and the
  scanner's remediation digest, which match).
- mstorsjo/llvm-mingw drops the floating :latest and pins the current
  digest the same way.
- The MSYS2 zlib sysroot package in Dockerfile.mingw is verified against
  a pinned sha256 before extraction instead of piping the download
  straight into tar.

Dockerfile.alpine was already pinned; both rebuilt images (test, lint)
verified building with the new digests.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-23 17:49:41 +02:00

..

vm

test-infra: overlap the local ladder, open the serial tail, keep container I/O off virtiofs

2026-07-23 01:33:58 +02:00

docker-compose.yml

test-infra: overlap the local ladder, open the serial tail, keep container I/O off virtiofs

2026-07-23 01:33:58 +02:00

Dockerfile

build(test-infra): pin container base images and package downloads by hash

2026-07-23 17:49:41 +02:00

Dockerfile.alpine

Fix CodeQL alerts: pin Alpine image digest, scope release permissions

2026-04-02 22:42:44 +02:00

Dockerfile.lint

build(test-infra): pin container base images and package downloads by hash

2026-07-23 17:49:41 +02:00

Dockerfile.mingw

build(test-infra): pin container base images and package downloads by hash

2026-07-23 17:49:41 +02:00

ladder.sh

test-infra: overlap the local ladder, open the serial tail, keep container I/O off virtiofs

2026-07-23 01:33:58 +02:00

run.sh

test: widen ThreadSanitizer coverage and add native ARM64 Windows UBSan

2026-07-22 17:48:54 +02:00