From 033d63e8deca47cb9d055a72b779bf3577e355be Mon Sep 17 00:00:00 2001
From: MacOS <bachhofner.dev@gmail.com>
Date: Mon, 20 Jul 2026 15:12:21 +0200
Subject: [PATCH] docs(Dockerfile): pin docker image with hash

---
 docs/.docker/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/.docker/Dockerfile b/docs/.docker/Dockerfile
index a9900af7..c0de8597 100644
--- a/docs/.docker/Dockerfile
+++ b/docs/.docker/Dockerfile
@@ -13,7 +13,7 @@
 #   3. Offline extras available but not forced: lunr full-text search,
 #      a pre-baked Antora UI bundle, and MathJax es5 for LaTeX.
 #   4. asciidoctor-kroki installed-but-unused as an escape hatch.
-FROM node:20-alpine
+FROM node:20-alpine@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293
 
 LABEL org.opencontainers.image.title="markup-antora" \
       org.opencontainers.image.description="Universal Antora site generator with offline Mermaid (mermaid-cli), offline search (lunr), pre-baked UI bundle + MathJax. No Kroki, no CDN." \