What the developer wrote
Authored by Jon Griffiths
docker: update jade_builder
What changed, and why it matters
This commit simply swaps the SHA256 digest of the Docker base image used for building Jade firmware in three configuration files. There is no code change, no disclosed vulnerability, and no security signal in the commit itself or the supplied references.
No security action is required based on the commit alone. If reviewing supply-chain posture, verify the new jade_builder image digest against Blockstream's published image provenance or build the image from a trusted Dockerfile before using it for firmware builds.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates the pinned blockstream/jade_builder image digest from sha256:af81775ea2754bdb9494b644327233ddd19403acbb94232ca2824785e13e89fc to sha256:f0be8979a85a99c481ffdad0040822698f1a1acba773574f05b177becb796d2f in .gitlab-ci.yml, Dockerfile.qemu, and docker-compose.yml. No source code, build logic, or runtime behavior is modified. The reason for the image update is not stated.
Changed components
CI/CD container image reference (.gitlab-ci.yml)QEMU Dockerfile base image reference (Dockerfile.qemu)Docker Compose dev service image reference (docker-compose.yml)Inspect captured patch +3 / −3
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5b6a2d6..6e26063 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -14,7 +14,7 @@ stages:
- build_diy
- docker_build
-image: blockstream/jade_builder@sha256:af81775ea2754bdb9494b644327233ddd19403acbb94232ca2824785e13e89fc
+image: blockstream/jade_builder@sha256:f0be8979a85a99c481ffdad0040822698f1a1acba773574f05b177becb796d2f
include:
- gitlab/prod_fw.yml
diff --git a/Dockerfile.qemu b/Dockerfile.qemu
index 03d2404..cea28c8 100644
--- a/Dockerfile.qemu
+++ b/Dockerfile.qemu
@@ -1,4 +1,4 @@
-FROM blockstream/jade_builder@sha256:af81775ea2754bdb9494b644327233ddd19403acbb94232ca2824785e13e89fc
+FROM blockstream/jade_builder@sha256:f0be8979a85a99c481ffdad0040822698f1a1acba773574f05b177becb796d2f
ARG QEMU_CONFIG_ARGS="--dev --ci --psram"
ARG QEMU_GDB=""
diff --git a/docker-compose.yml b/docker-compose.yml
index c0ae3af..819853f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
services:
dev:
- image: blockstream/jade_builder@sha256:af81775ea2754bdb9494b644327233ddd19403acbb94232ca2824785e13e89fc
+ image: blockstream/jade_builder@sha256:f0be8979a85a99c481ffdad0040822698f1a1acba773574f05b177becb796d2f
volumes:
- .:/host/jade/
- /dev/serial/by-id:/dev/serial/by-id
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.