From b9f94cea4334bffee2d8429eb21d742114198cca Mon Sep 17 00:00:00 2001 From: Ayushi1296 Date: Thu, 22 Oct 2026 10:32:22 +0200 Subject: [PATCH] Pin upstream pr-agent image by digest The action ran FROM codiumai/pr-agent:github_action, a mutable tag, so a compromised upstream push (cf. the LiteLLM 1.107.0 supply-chain attack) would run immediately in every repo that uses this action with OPENAI_KEY and a write-scoped GITHUB_TOKEN. Co-Authored-By: Claude Opus 5.5 --- Dockerfile.github_action_dockerhub | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Dockerfile.github_action_dockerhub b/Dockerfile.github_action_dockerhub index 61d64e2575..3f1db4bd59 100644 --- a/Dockerfile.github_action_dockerhub +++ b/Dockerfile.github_action_dockerhub @@ -1 +1,3 @@ -FROM codiumai/pr-agent:github_action +# Pinned by digest so upstream can't change what runs with our secrets. +# Tag: codiumai/pr-agent:github_action (last updated 2026-04-16) +FROM codiumai/pr-agent:github_action@sha256:960571f0efbc88d96127c1ee7dac3059648dfa7c2109750fc92f315cf07979ed