use gcr.io/distroless/static (rootful)

abayer · Mar 29, 2022 · 270747a · 270747a
1 parent b5c45ec
commit 270747a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.ko.yaml b/.ko.yaml
@@ -3,3 +3,6 @@ baseImageOverrides:
   # git-init uses a base image that includes Git, and supports running either
   # as root or as user nonroot with UID 65532.
   github.com/tektoncd/pipeline/cmd/git-init: gcr.io/tekton-nightly/github.com/tektoncd/pipeline/git-init-build-base:latest
+
+  # pullrequest-init supports running either as root or as user with UID 65532.
+  github.com/tektoncd/pipeline/cmd/pullrequest-init: gcr.io/distroless/static
diff --git a/tekton/publish.yaml b/tekton/publish.yaml
@@ -110,6 +110,7 @@ spec:
 
         # This matches values configured in .ko.yaml
         $(params.package)/cmd/git-init: ${CONTAINER_REGISTRY}/$(params.package)/git-init-build-base:latest
+        $(params.package)/cmd/pullrequest-init: gcr.io/distroless/static
       EOF
 
       cat ${PROJECT_ROOT}/.ko.yaml