build: specify exact versions for Alpine packages in Dockerfiles

Author: stefanodvx

.hadolint.yaml

@@ -5,10 +5,10 @@ ENV GOCACHE=/root/.cache/go-build
 RUN --mount=type=cache,target=/var/cache/apk,sharing=locked \
     --mount=type=cache,target=/var/lib/apk,sharing=locked \
     apk add --no-cache \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
-        build-base \
-        libheif-dev
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/main" \
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/community" \
+        "build-base=0.5-r3" \
+        "libheif-dev=1.20.2-r1"
 
 WORKDIR /app
 
@@ -36,10 +36,10 @@ WORKDIR /app
 RUN --mount=type=cache,target=/var/cache/apk,sharing=locked \
     --mount=type=cache,target=/var/lib/apk,sharing=locked \
     apk add --no-cache \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
-        ffmpeg \
-        libheif
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/main" \
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/community" \
+        "ffmpeg=8.0.1-r0" \
+        "libheif=1.20.2-r1"
 
 COPY --from=builder /app/govd ./govd
 

Dockerfile

@@ -3,11 +3,11 @@ FROM golang:1.25-alpine
 RUN --mount=type=cache,target=/var/cache/apk,sharing=locked \
     --mount=type=cache,target=/var/lib/apk,sharing=locked \
     apk add --no-cache \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main \
-        --repository=https://dl-cdn.alpinelinux.org/alpine/edge/community \
-        build-base \
-        libheif-dev \
-        ffmpeg
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/main" \
+        --repository="https://dl-cdn.alpinelinux.org/alpine/edge/community" \
+        "build-base=0.5-r3" \
+        "libheif-dev=1.20.2-r1" \
+        "ffmpeg=8.0.1-r0"
 
 WORKDIR /app