From 8cdc2fe6605c7bdeb9f3b22a4b4634f0122eb1ed Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 21 Aug 2026 21:54:40 +0000
Subject: [PATCH] Pin gcr.io/distroless/static Docker tag to 1c2c046

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index ef67192..e6cac43 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,7 +20,7 @@ RUN go build -ldflags="-s -w" -a -o cloud-profile-sync main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot
+FROM gcr.io/distroless/static:nonroot@sha256:1c2c046bc09ed40fad370b599a0b1ae7987f55b01e247cf27a7c27cd97e5bbc7
 WORKDIR /
 LABEL source_repository="https://github.com/cobaltcore-dev/cloud-profile-sync"
 COPY --from=builder /workspace/cloud-profile-sync .