From 29b1b0d10d04ec9df8368dbbc92b425f343c5379 Mon Sep 17 00:00:00 2001
From: Lotem <81lotem@gmail.com>
Date: Wed, 1 Jul 2026 11:47:59 +0300
Subject: [PATCH] Pin the base image to a digest

python:3.13-alpine is a mutable tag that gets updated whenever
upstream ships Alpine/Python patches, so a build today could pull
different content than a build tomorrow with no change to this file.
Pin to the digest instead.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 823a198..02bb8e7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.13-alpine
+FROM python:3.13-alpine@sha256:399babc8b49529dabfd9c922f2b5eea81d611e4512e3ed250d75bd2e7683f4b0
 
 COPY LICENSE \
         README.md \