{"id":49548863,"url":"https://github.com/deadnews/pindock","last_synced_at":"2026-05-05T13:01:32.430Z","repository":{"id":347538457,"uuid":"1192171354","full_name":"deadnews/pindock","owner":"deadnews","description":"Pin and update Docker image digests in Dockerfiles and compose files","archived":false,"fork":false,"pushed_at":"2026-03-28T10:56:34.000Z","size":36,"stargazers_count":1,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-03-28T14:36:54.976Z","etag":null,"topics":["docker","docker-compose"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/deadnews.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-03-26T00:43:39.000Z","updated_at":"2026-03-28T10:10:05.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/deadnews/pindock","commit_stats":null,"previous_names":["deadnews/pindock"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/deadnews/pindock","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deadnews%2Fpindock","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deadnews%2Fpindock/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deadnews%2Fpindock/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deadnews%2Fpindock/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/deadnews","download_url":"https://codeload.github.com/deadnews/pindock/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/deadnews%2Fpindock/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32650449,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-05T11:29:49.557Z","status":"ssl_error","status_checked_at":"2026-05-05T11:29:48.587Z","response_time":54,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","docker-compose"],"created_at":"2026-05-02T21:00:29.939Z","updated_at":"2026-05-05T13:01:32.417Z","avatar_url":"https://github.com/deadnews.png","language":"Go","funding_links":[],"categories":["Image Lifecycle"],"sub_categories":["Image Scanning \u0026 SBOM"],"readme":"# pindock\n\n\u003e Pin and update Docker image digests in Dockerfiles and compose files\n\n[![PyPI: Version](https://img.shields.io/pypi/v/pindock?logo=pypi\u0026logoColor=white)](https://pypi.org/project/pindock)\n[![AUR: version](https://img.shields.io/aur/version/pindock-bin?logo=archlinux\u0026logoColor=white)](https://aur.archlinux.org/packages/pindock-bin)\n[![GitHub: Release](https://img.shields.io/github/v/release/deadnews/pindock?logo=github\u0026logoColor=white)](https://github.com/deadnews/pindock/releases/latest)\n[![Docker: ghcr](https://img.shields.io/badge/docker-gray.svg?logo=docker\u0026logoColor=white)](https://github.com/deadnews/pindock/pkgs/container/pindock)\n[![CI: Main](https://img.shields.io/github/actions/workflow/status/deadnews/pindock/main.yml?branch=main\u0026logo=github\u0026logoColor=white\u0026label=main)](https://github.com/deadnews/pindock)\n[![CI: Coverage](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/deadnews/pindock/refs/heads/badges/coverage.json)](https://github.com/deadnews/pindock)\n\n**[Installation](#installation)** • **[Usage](#usage)** • **[Pre-commit](#pre-commit)**\n\n## Installation\n\n```sh\n# PyPI\nuv tool install pindock\n\n# AUR\nyay -S pindock-bin\n\n# Docker\ndocker pull ghcr.io/deadnews/pindock\n```\n\n## Usage\n\n```sh\nUsage: pindock \u003ccommand\u003e [flags]\n\nPin and update Docker image digests.\n\nCommands:\n  run      Pin unpinned image digests.\n  check    Verify all images are pinned.\n\nrun flags:\n  -C, --dir=.      Directory to scan.\n  -u, --update     Also update pinned digests to latest.\n  -v, --verbose    Show all images, including pinned.\n\ncheck flags:\n  -C, --dir=.      Directory to scan.\n  -u, --update     Also check pinned digests for updates.\n  -v, --verbose    Show all images, including pinned.\n```\n\nWhen no files are given, `pindock` auto-discovers files recursively.\n\n### Supported files\n\n- `Dockerfile`, `Containerfile` (and variants like `Dockerfile.dev`, `*.dockerfile`)\n- `compose*.yml`, `docker-compose*.yml` (and `.yaml`)\n\n### Supported instructions\n\n| Dockerfile                                           | Compose                     |\n| ---------------------------------------------------- | --------------------------- |\n| `FROM [--platform=...] image:tag[@digest] [AS name]` | `image: image:tag[@digest]` |\n| `COPY --from=image:tag[@digest] ...`                 |                             |\n| `RUN --mount=from=image:tag[@digest],... ...`        |                             |\n\n### Authentication\n\nUses existing Docker credentials. If you can `docker pull`, `pindock` works too.\n\n## Pre-commit\n\n```yml\nrepos:\n  - repo: https://github.com/deadnews/pindock\n    rev: v1.0.0\n    hooks:\n      - id: pindock\n      - id: pindock-check\n\n      # example with args\n      - id: pindock-check\n        args: [--update, --verbose]\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdeadnews%2Fpindock","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdeadnews%2Fpindock","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdeadnews%2Fpindock/lists"}