From 5c7e2a135f421e1e6ee54e2bfcf6e7891614f2af Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 22 Sep 2026 11:52:59 +0000
Subject: [PATCH] Pin ubuntu Docker tag to 008173c

---
 docker/Dockerfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 4a837a2..75b9c19 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,5 +1,5 @@
 # Stage 1: Fetch Schema Artifacts
-FROM ubuntu:24.04 AS schema-fetcher
+FROM ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3 AS schema-fetcher
 
 RUN apt-get update && apt-get install -y --no-install-recommends curl jq tar ca-certificates \
     && rm -rf /var/lib/apt/lists/* \
@@ -15,7 +15,7 @@ RUN TAG=$(curl -fsSL https://api.github.com/repos/CCPBioSim/biosim-schema/releas
 
 
 # Stage 2: Build Python dependencies
-FROM ubuntu:24.04 AS builder
+FROM ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3 AS builder
 
 ENV DEBIAN_FRONTEND=noninteractive \
     PYTHONDONTWRITEBYTECODE=1 \
@@ -49,7 +49,7 @@ RUN pip install --no-cache-dir \
     pip install --no-cache-dir .
 
 # Stage 3: Runtime
-FROM ubuntu:24.04
+FROM ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3
 
 ARG PORT=5002