From 04509537364d43afa5b58f2ca59fbeb4f6c4ea59 Mon Sep 17 00:00:00 2001
From: Alex Villarreal <716334+alexvy86@users.noreply.github.com>
Date: Tue, 9 Jul 2024 12:00:43 -0500
Subject: [PATCH] gitssh: Add base image sha to Dockerfile (#21802)

---
 server/gitssh/Dockerfile          | 2 +-
 tools/pipelines/server-gitssh.yml | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/gitssh/Dockerfile b/server/gitssh/Dockerfile
index f3556e24444..4714b23b342 100644
--- a/server/gitssh/Dockerfile
+++ b/server/gitssh/Dockerfile
@@ -3,7 +3,7 @@
 
 # DisableDockerDetector "No feasible secure solution for OSS repos yet"
 
-FROM alpine:3.12
+FROM alpine:3.12@sha256:c75ac27b49326926b803b9ed43bf088bc220d22556de1bc5f72d742c91398f69
 
 # Install Git and OpenSSH so we can run a git server
 RUN apk add --no-cache git
diff --git a/tools/pipelines/server-gitssh.yml b/tools/pipelines/server-gitssh.yml
index bfaf115fc27..6a0ab0b9484 100644
--- a/tools/pipelines/server-gitssh.yml
+++ b/tools/pipelines/server-gitssh.yml
@@ -90,4 +90,5 @@ extends:
     buildDirectory: server/gitssh
     containerName: fluidframework/routerlicious/gitssh
     setVersion: false
+    enableDockerImagePull: false
     tagName: gitssh