.github/actions/versionsapi/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.20.0@sha256:61dafe97cc20b12faef7a744a1a3e43411c45b9908c3ccf9cadd05566e473e1d as builder
+FROM golang:1.19.5@sha256:a0b51fe882f269828b63e7f69e6925f85afc548cf7cf967ecbfbcce6afe6f235 as builder
 
 # Download project root dependencies
 WORKDIR /workspace

.github/workflows/update-cli-reference.yml

@@ -9,7 +9,6 @@ on:
       - "cli/cmd/**"
       - "cli/internal/cmd/**"
       - "hack/clidocgen/**"
-      - ".github/workflows/update-cli-reference.yml"
 
 jobs:
   update-docs:
@@ -31,7 +30,7 @@ jobs:
 
       - name: Regenerate CLI reference of the documentation
         working-directory: hack/clidocgen
-        run: go run . | cat header.md - > ../../docs/docs/reference/cli.md
+        run: go run . | cat header.md - > ../../cli.md
 
       - name: Create PR (if there are changes)
         uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04 # v4.2.3

3rdparty/gcp-guest-agent/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04@sha256:c985bc3f77946b8e92c9a3648c6f31751a7dd972e06604785e47303f4ad47c4c as build
+FROM ubuntu:22.04@sha256:965fbcae990b0467ed5657caceaec165018ef44a4d2d46c7cdea80a9dff0d1ea as build
 
 # Install packages
 RUN apt-get update && apt-get install -y \

hack/azure-snp-report-verify/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:20.04@sha256:4a45212e9518f35983a976eead0de5eecc555a2f047134e9dd2cfc589076a00d AS build
+FROM ubuntu:20.04@sha256:b872b0383a2149196c67d16279f051c3e36f2acb32d7eb04ef364c8863c6264f AS build
 RUN apt-get update && apt-get install -y \
   build-essential \
   libcurl4-openssl-dev \
@@ -10,7 +10,7 @@ RUN wget -q https://github.com/Azure/confidential-computing-cvm-guest-attestatio
   && touch Utils.h \
   && g++ -Os -I/usr/include/azguestattestation1 -oclient main.cpp -lazguestattestation
 
-FROM ubuntu:20.04@sha256:4a45212e9518f35983a976eead0de5eecc555a2f047134e9dd2cfc589076a00d AS release
+FROM ubuntu:20.04@sha256:b872b0383a2149196c67d16279f051c3e36f2acb32d7eb04ef364c8863c6264f AS release
 COPY --from=build client azguestattestation1_1.0.2_amd64.deb /
 RUN apt-get update && apt-get install -y /azguestattestation1_1.0.2_amd64.deb
 ENTRYPOINT ["/client"]

joinservice/Dockerfile

@@ -26,6 +26,6 @@ ARG PROJECT_VERSION=0.0.0
 RUN --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 go build -o join-service -trimpath -buildvcs=false -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.VersionInfo=${PROJECT_VERSION}" ./cmd/
 
 # Use gcr.io/distroless/static here since we need CA certificates to be installed for aTLS operations on GCP.
-FROM gcr.io/distroless/static@sha256:390b7a3c81f4556d518d57c5babc6fa617a47c63e670f6bbac9d5cad22f272c1 as release
+FROM gcr.io/distroless/static@sha256:2019e0c59d0292a74a9dbb6c178092a08e856c88f4c5bc1963fa829b50fc4b24 as release
 COPY --from=build /constellation/joinservice/join-service /joinservice
 ENTRYPOINT [ "/joinservice" ]

keyservice/Dockerfile

@@ -26,6 +26,6 @@ WORKDIR /constellation/keyservice/cmd
 ARG PROJECT_VERSION=0.0.0
 RUN --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 go build -o /constellation/build/keyservice -trimpath -buildvcs=false -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.VersionInfo=${PROJECT_VERSION}"
 
-FROM gcr.io/distroless/static:nonroot@sha256:6b01107391648040c796967b49b7973188b7c9a6b1d49d06090db349248eba39 as release
+FROM gcr.io/distroless/static:nonroot@sha256:26d07ba1f954c02943786e352bc2c8f4eac719ae2f76a0ced68a953bed93a779 as release
 COPY --from=build /constellation/build/keyservice /keyservice
 ENTRYPOINT ["/keyservice"]

operators/constellation-node-operator/Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.20.0@sha256:61dafe97cc20b12faef7a744a1a3e43411c45b9908c3ccf9cadd05566e473e1d as builder
+FROM golang:1.19.5@sha256:a0b51fe882f269828b63e7f69e6925f85afc548cf7cf967ecbfbcce6afe6f235 as builder
 
 # Download project root dependencies
 WORKDIR /workspace
@@ -25,7 +25,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot@sha256:6b01107391648040c796967b49b7973188b7c9a6b1d49d06090db349248eba39 as release
+FROM gcr.io/distroless/static:nonroot@sha256:26d07ba1f954c02943786e352bc2c8f4eac719ae2f76a0ced68a953bed93a779 as release
 WORKDIR /
 COPY --from=builder /workspace/operators/constellation-node-operator/manager .
 USER 65532:65532

proto/Dockerfile.gen-proto

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04@sha256:c985bc3f77946b8e92c9a3648c6f31751a7dd972e06604785e47303f4ad47c4c as build
+FROM ubuntu:22.04@sha256:965fbcae990b0467ed5657caceaec165018ef44a4d2d46c7cdea80a9dff0d1ea as build
 
 ARG GO_VER=1.19.5
 ARG GEN_GO_VER=1.28.1