Add support for pinning the build and build-base images
Metadata
Current evaluation
Digest pinning for base and build-base images remains unsupported; current validation only accepts enumerated releases, limiting reproducibility and Renovate integration.
Suggested action: needs triage
Reason: The project models restrict base and build-base to enumerated Literal values, while the registry loader converts "@" to ":", so digest-qualified references are not supported. The request is valid and clearly motivated, but it has no labels, maintainer response, or explicit digest syntax and therefore still needs triage.
Evaluated by: mr-cal-bot
Impact:
55
Quick Win:
13
Complexity:
66
Confidence:
96
Actionability:
68
Issue body
### What needs to get done
Add support for pinning the build and build-base images in the rockcraft descriptors to an existing image diggest
### Why it needs to get done
The motivation for this request is twofold:
- Support repeatable builds, with all the advantages this entails
- Trigger new builds when the base or build-base image changes using widely adopted mechanisms like [renovate](https://github.com/renovatebot/renovate). Right now there's [a workaround to support this](https://github.com/canonical/synapse-operator/blob/main/synapse_rock/rockcraft.yaml#L9) but since the base images are not pinned the resulting OCI image can be updated alongside any other change before the PR is merged
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
55
Quick Win:
13
Complexity:
66
Confidence:
96
Actionability:
68
|
needs triage | Digest pinning for base and build-base images remains unsupported; current validation only accepts enumerated releases, limiting reproducibility and Renovate integration. | |
| qwen/qwen3.6-35b-a3b |
Impact:
50
Quick Win:
15
Complexity:
50
Confidence:
60
Actionability:
60
|
needs triage | Feature request to add digest-based pinning for build and build-base images in rockcraft descriptors to enable reproducible builds and renovate integration | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
20
Staleness:
75
Complexity:
55
Confidence:
75
Support Request:
10
|
needs triage | Feature request to pin build and build-base images by digest in rockcraft descriptors for repeatable builds and renovate-driven updates. Open 951 days, no labels, zero maintainer comments, no assignee. Code confirms base types are still Literal strings with no digest support. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
85
Complexity:
40
Confidence:
75
Support Request:
5
|
needs triage | Feature request to add digest pinning for build and build-base images in rockcraft descriptors. Enables repeatable builds and automated base image updates. Currently unlabelled, has zero maintainer comments, and has been inactive for over two years. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
88
Complexity:
45
Confidence:
80
Support Request:
5
|
needs triage | Feature request to add digest pinning for build and build-base images in rockcraft descriptors to enable reproducible builds and automated base image updates. Currently unlabelled and inactive for over two years. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
90
Complexity:
60
Confidence:
75
Support Request:
10
|
needs triage | Feature request to add digest pinning for build and build-base images in rockcraft descriptors to enable reproducible builds and automated base image updates. Currently unlabelled and inactive for over a year. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.