Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
It currently can't SHA-pin the docker-compose.yml `image` keys, so can't help us achieve reproducible builds (dependabot/dependabot-core#390)
- Loading branch information
9b30f5f
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
FYI, there is a PR in dependabot to add support for
docker-compose.yml
files.