Pin release docker base image to 1.0.2 to remove ffmpeg binary

2026-06-23 20:16:23 +01:00
parent 41181c9da1
commit f113b4f4b4
1 changed files with 2 additions and 1 deletions
@@ -155,9 +155,10 @@ jobs:
          cache-to: type=gha,mode=max,scope=stirling-pdf-latest
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
+          # Overrides the Dockerfile ARG default; 1.0.2 base drops the ffmpeg binary (CVEs).
          build-args: |
            VERSION_TAG=${{ steps.versionNumber.outputs.versionNumber }}
-            BASE_VERSION=1.0.0
+            BASE_VERSION=1.0.2
          platforms: linux/amd64,linux/arm64/v8
          provenance: true
          sbom: true