[Ops] Lock alpine version

Weiyuan-Lane · Weiyuan-Lane · commit dfb14d814b6e · 2020-07-29T00:58:19.000+08:00
- Also added reference to baseline file for scanning purposes
diff --git a/Dockerfile.base b/Dockerfile.base
@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine:3.12.0
 
 WORKDIR /opt
 
diff --git a/Dockerfile.ci b/Dockerfile.ci
@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine:3.12.0
 
 WORKDIR /opt
 
diff --git a/evaluate-codebase b/evaluate-codebase
@@ -1,3 +1,3 @@
 #!/bin/sh
 
-git diff --name-only HEAD `cat .secrets.lasthash`| grep -v .secrets.baseline | grep -v .secrets.lasthash | xargs detect-secrets-hook
+git diff --name-only HEAD `cat .secrets.lasthash`| grep -v .secrets.baseline | grep -v .secrets.lasthash | xargs -I{} detect-secrets-hook {}  --baseline=".secrets.baseline"

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,3 @@`
`1`	`1`	`#!/bin/sh`
`2`	`2`
`3`		-git diff --name-only HEAD `cat .secrets.lasthash`\| grep -v .secrets.baseline \| grep -v .secrets.lasthash \| xargs detect-secrets-hook
	`3`	+git diff --name-only HEAD `cat .secrets.lasthash`\| grep -v .secrets.baseline \| grep -v .secrets.lasthash \| xargs -I{} detect-secrets-hook {} --baseline=".secrets.baseline"