What the developer wrote
Authored by Jon Griffiths
docker: update jade_builder
What changed, and why it matters
This commit simply updates three build configuration files to use a newer version (different SHA256 hash) of the same 'blockstream/jade_builder' Docker image. There is no code change, no vulnerability fix, and no security-relevant behavior change visible in the diff.
No security action required based on this diff alone. If the new jade_builder image contains package updates, review the image's own change log or build log for any relevant security fixes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates the pinned Docker image digest for blockstream/jade_builder from sha256:9f98cf9a… to sha256:5db8e13c… in .gitlab-ci.yml, Dockerfile.qemu, and docker-compose.yml. This is a routine container base image bump. The commit message and diff provide no information about what changed inside the new image, and there are no security signals in the repository change itself.
Changed components
.gitlab-ci.ymlDockerfile.qemudocker-compose.ymlInspect captured patch +3 / −3
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 173bfa2..314451b 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -14,7 +14,7 @@ stages:
- build_diy
- docker_build
-image: blockstream/jade_builder@sha256:9f98cf9a03b6b98fcdf70cf84569304e85842452f2a3bdc5de7d8128da208013
+image: blockstream/jade_builder@sha256:5db8e13ca640e6b969d66139d708610c27d39a1c4d78ca096ee98f2b4c89130f
include:
- gitlab/prod_fw.yml
diff --git a/Dockerfile.qemu b/Dockerfile.qemu
index 3800483..798f018 100644
--- a/Dockerfile.qemu
+++ b/Dockerfile.qemu
@@ -1,4 +1,4 @@
-FROM blockstream/jade_builder@sha256:9f98cf9a03b6b98fcdf70cf84569304e85842452f2a3bdc5de7d8128da208013
+FROM blockstream/jade_builder@sha256:5db8e13ca640e6b969d66139d708610c27d39a1c4d78ca096ee98f2b4c89130f
ARG QEMU_CONFIG_ARGS="--dev --ci --psram"
ARG QEMU_GDB=""
diff --git a/docker-compose.yml b/docker-compose.yml
index 592c77d..3ed5e1d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
services:
dev:
- image: blockstream/jade_builder@sha256:9f98cf9a03b6b98fcdf70cf84569304e85842452f2a3bdc5de7d8128da208013
+ image: blockstream/jade_builder@sha256:5db8e13ca640e6b969d66139d708610c27d39a1c4d78ca096ee98f2b4c89130f
volumes:
- .:/host/jade/
- /dev/serial/by-id:/dev/serial/by-id
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.