fix: Pin Docker base images to SHA

README.md

@@ -54,6 +54,8 @@ Each demo might have unique deployment requirements. Please refer to each indivi
 |[NGINX Ingress Controller](nginx-workshops/README.md)|Learn everything you need to get started with NGINX Ingress Controller and its capabilities|@apcurrier, @chrisakker, @sdutta9|
 |[NGINXaaS for Azure](nginx-workshops/README.md)|Learn everything you need to get started with NGINX as a Service for Azure (NGINXaaS) and its capabilities|@apcurrier, @chrisakker, @sdutta9|
 |[NGINX One Console](nginx-workshops/README.md)|Learn everything you need to get started with NGINX One Console and its capabilities|@apcurrier, @chrisakker, @sdutta9|
+|[NGINX Ingress Controller Lab](nginx-workshops/README.md)|NGINX Ingress Controller lab|@fabriziofiorucci|
+|[NGINX Gateway Fabric Lab](nginx-workshops/README.md)|NGINX Gateway Fabric lab|@fabriziofiorucci|
 
 ## Contributing
 

nginx-instance-manager/docker-deployment/Dockerfile.automated

@@ -1,4 +1,4 @@
-FROM ubuntu:20.04
+FROM ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
 
 ARG ADD_PUM
 

nginx-instance-manager/docker-deployment/Dockerfile.manual

@@ -1,4 +1,4 @@
-FROM ubuntu:20.04
+FROM ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
 
 ARG NIM_DEBFILE
 ARG SM_IMAGE=nim-files/.placeholder

nginx-workshops/README.md

@@ -3,6 +3,7 @@
 |Title|Public Workshop Repo|
 |-----|-----|
 | NGINX Basics|<https://github.com/nginxinc/nginx-basics-workshops>|
-| NGINX Ingress Controller|<https://github.com/nginxinc/nginx-ingress-workshops>|
+| NGINX Gateway Fabric|<https://github.com/f5devcentral/NGINX-Gateway-Fabric-Lab>|
+| NGINX Ingress Controller|<li><https://github.com/nginxinc/nginx-ingress-workshops></li><li><https://github.com/f5devcentral/NGINX-Ingress-Controller-Lab></li>|
 | NGINX as a Service for Azure (NGINXaaS)|<https://github.com/nginxinc/nginx-azure-workshops>|
 | NGINX One Console|<https://github.com/nginxinc/nginx-one-workshops>|

nginx/api-steering/apiserver/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.12-slim@sha256:e55523f127124e5edc03ba201e3dbbc85172a2ec40d8651ac752364b23dfd733
 
 WORKDIR /app
 COPY requirements.txt .

nginx/api-steering/backend/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.12-slim@sha256:e55523f127124e5edc03ba201e3dbbc85172a2ec40d8651ac752364b23dfd733
 
 WORKDIR /app
 COPY requirements.txt .

nginx/api-steering/nginx/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.19
+FROM alpine:3.19@sha256:e5d0aea7f7d2954678a9a6269ca2d06e06591881161961ea59e974dff3f12377
 
 LABEL maintainer="NGINX Docker Maintainers <[email protected]>"
 

nginx/docker-image-builder/Dockerfile.oss

@@ -1,4 +1,4 @@
-FROM nginx:stable-bullseye-perl
+FROM nginx:stable-bullseye-perl@sha256:fc78d87401fdbadf36c638febdad36ae17dd51d7b5d70bb0a34d94e0daa3a0e1
 
 ARG NMS_URL
 ARG NGINX_AGENT=false

nginx/docker-image-builder/Dockerfile.plus

@@ -1,4 +1,4 @@
-FROM debian:bullseye-slim
+FROM debian:bullseye-slim@sha256:779034981fec838da124ff6ab9211499ba5d4e769dabdfd6c42c6ae2553b9a3b
 
 ARG NAP_WAF=false
 ARG NGINX_AGENT=false

nginx/docker-image-builder/Dockerfile.plus.unprivileged

@@ -1,4 +1,4 @@
-FROM debian:bullseye-slim
+FROM debian:bullseye-slim@sha256:779034981fec838da124ff6ab9211499ba5d4e769dabdfd6c42c6ae2553b9a3b
 
 ARG NAP_WAF=false
 ARG NGINX_AGENT=false

nginx/multicloud-gateway/test-backend-db/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:latest
+FROM ubuntu:latest@sha256:b59d21599a2b151e23eea5f6602f4af4d7d31c4e236d22bf0b62b86d2e386b8f
 RUN apt-get update
 
 RUN apt-get install -y -q build-essential python3-pip python3-dev python3-simplejson git

nginx/soap-to-rest/nginx/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.17
+FROM alpine:3.17@sha256:8fc3dacfb6d69da8d44e42390de777e48577085db99aa4e4af35f483eb08b989
 
 LABEL maintainer="NGINX Docker Maintainers <[email protected]>"