Dockerfile (1)

2-2: Consider using a more specific tag for reproducibility.

While 17-jdk-alpine works, it's a floating tag that pulls the latest patch version of Java 17. For better reproducibility and to prevent unexpected changes, consider pinning to a specific patch version.

🔎 Suggested improvement with specific version pinning

First, check the available tags to find the latest specific version:

#!/bin/bash
# Find the latest Java 17 Alpine-based tag
curl -s "https://hub.docker.com/v2/repositories/library/eclipse-temurin/tags?page_size=100&name=17" | jq -r '.results[] | select(.name | contains("jdk-alpine")) | .name' | grep -E '^17\.[0-9]+\.[0-9]+.*-jdk-alpine$' | sort -V | tail -5

Then update the Dockerfile with a specific version (example using a hypothetical version):

-FROM eclipse-temurin:17-jdk-alpine
+FROM eclipse-temurin:17.0.13_11-jdk-alpine

This ensures consistent builds across environments and makes it explicit which Java version you're using.

Configuration used: defaults

Review profile: CHILL

Plan: Pro