Commit graph

2 commits

Author SHA1 Message Date
Sylvain Bellemare
0959ea80db
Improve security of dockerfiles
* Verify checksum of downloaded rust target riscv32imac-unknown-xous_*.zip
* Pin base image to a sha256 digest
* Quote build arg to prevent shell injection attacks
* Run cargo --locked to make sure builds follow Cargo.lock
* Use --proto '=https' for curl to only allow HTTPS protocol to prevent downgrade attacks
* Create non-root user to run cargo commands and build artifacts
2026-01-16 16:41:43 +09:00
Sylvain Bellemare
f5bd5e2982
Add ci to build dabao firmware with docker 2026-01-14 15:03:03 +07:00