chore(builder): pin protoc versions

This doesn't upgrade versions to avoid changes in the protoc output which would require updating the generated code.
aquasecurity · May 17, 2024 · f2d6129 · f2d6129
1 parent 8c09548
commit f2d6129
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/builder/Dockerfile.protoc b/builder/Dockerfile.protoc
@@ -1,11 +1,14 @@
 FROM golang:1.21
 
+ARG PROTOC_VERSION="23.4"
+ARG PROTOC_ZIP="protoc-${PROTOC_VERSION}-linux-x86_64.zip"
+
 RUN apt update -y && apt install -y unzip 
-RUN wget https://github.com/protocolbuffers/protobuf/releases/download/v23.4/protoc-23.4-linux-x86_64.zip && \
-	unzip protoc-23.4-linux-x86_64.zip -d /usr/local
+RUN wget https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/${PROTOC_ZIP} && \
+	unzip ${PROTOC_ZIP} -d /usr/local
 
-RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28 && \
-	go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2 && \
-	go install github.com/mitchellh/protoc-gen-go-json@master
+RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28.1 && \
+	go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2.0 && \
+	go install github.com/mitchellh/protoc-gen-go-json@49905733154f04e47d685de62c2cc2b72613b69e # master
 
 WORKDIR /tracee