What the developer wrote
Authored by Jon Griffiths
docker: update jade_builder
What changed, and why it matters
This commit simply updates the SHA256 digest of the 'blockstream/jade_builder' Docker image used for building and testing Jade in four configuration files. There is no code change, no disclosed security fix, and no evidence in the commit or supplied references that this update addresses a vulnerability.
No security action required based on this commit alone. If reviewing supply-chain posture, verify the new jade_builder image digest against Blockstream's published image metadata and confirm reproducibility of builds.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates the pinned Docker image reference from sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb to sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9 in .gitlab-ci.yml, Dockerfile.qemu, docker-compose.yml, and main/qemu/README.md. No source code, build scripts, or runtime logic are modified. The reason for the image update is not stated.
Changed components
Docker build environment reference (blockstream/jade_builder image digest)Inspect captured patch +5 / −5
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6b0830f..cdcd301 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -16,7 +16,7 @@ stages:
- docker_build
- security
-image: blockstream/jade_builder@sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb
+image: blockstream/jade_builder@sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9
include:
- gitlab/prod_fw.yml
diff --git a/Dockerfile.qemu b/Dockerfile.qemu
index d00839d..a62bc98 100644
--- a/Dockerfile.qemu
+++ b/Dockerfile.qemu
@@ -1,4 +1,4 @@
-FROM blockstream/jade_builder@sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb
+FROM blockstream/jade_builder@sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9
ARG QEMU_CONFIG_ARGS="--dev --ci --psram"
ARG QEMU_GDB=""
diff --git a/docker-compose.yml b/docker-compose.yml
index 31148ac..4f9df11 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
services:
dev:
- image: blockstream/jade_builder@sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb
+ image: blockstream/jade_builder@sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9
volumes:
- .:/host/jade/
- /dev/serial/by-id:/dev/serial/by-id
diff --git a/main/qemu/README.md b/main/qemu/README.md
index 7c8162d..3e0c0b6 100644
--- a/main/qemu/README.md
+++ b/main/qemu/README.md
@@ -3,11 +3,11 @@ Run the following:
```docker build . -t local_jade```
The above creates the docker image with all the required dependencies. You can also look into fetching instead blockstream/jade_builder with (or see https://hub.docker.com/r/blockstream/jade_builder/tags for recent images)
-```docker pull blockstream/jade_builder@sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb```
+```docker pull blockstream/jade_builder@sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9```
You can then tag this as local_jade with
-```docker tag blockstream/jade_builder@sha256:13692d96d78221de3a67d4bd4587c97c58bfa5eab16a9c72cb6d10529e1d3ebb local_jade```
+```docker tag blockstream/jade_builder@sha256:8b739db85b6b99664db0e3ece57cddfa4e0fee4101a20ca930c391273f21e2f9 local_jade```
At this point we are ready to build and run Jade in qemu with the following:
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.