build: pin and verify image inputs

2026-07-26 09:24:44 +00:00
parent c094b1ee68
commit a38bbfbae2
17 changed files with 172 additions and 38 deletions
@@ -38,8 +38,13 @@ include = ["bot_bottle*"]
 bot_bottle = [
    "gateway/egress/entrypoint.sh",
    "contrib/claude/Dockerfile",
+    "contrib/claude/package.json",
+    "contrib/claude/package-lock.json",
    "contrib/codex/Dockerfile",
+    "contrib/codex/install.sh.sha256",
    "contrib/pi/Dockerfile",
+    "contrib/pi/package.json",
+    "contrib/pi/package-lock.json",
    "backend/firecracker/netpool.defaults.env",
    "backend/macos_container/nested-containers-init.sh",
 ]