From 1fe6646735da32ba0aa3954a23dc4cc737b737f9 Mon Sep 17 00:00:00 2001
From: Justin Kromlinger <hashworks@archlinux.org>
Date: Mon, 2 Nov 2020 19:37:20 +0100
Subject: [PATCH] DL3018, DL3018: Pin apk package versions, use --no-cache

---
 Dockerfile.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile.template b/Dockerfile.template
index f97ec55..37d4f67 100644
--- a/Dockerfile.template
+++ b/Dockerfile.template
@@ -10,7 +10,7 @@
 # allow us to automate the releaes process.
 FROM alpine:3.12 AS verify
 COPY TEMPLATE_ROOTFS_FILE /
-RUN apk update && apk add curl bash
+RUN apk update && apk add --no-cache curl=7.73.0-r0 bash=5.0.18-r0
 SHELL ["/bin/bash", "-c"]
 RUN ROOTFS="$(curl -sOJL --continue-at - -w "%{filename_effective}" TEMPLATE_ROOTFS_URL)" && \
     sha256sum -c <<< "TEMPLATE_ROOTFS_HASH" && \