Automatic upgrades of base Docker images can lead to supply chain attacks

[josh-complex]

Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=26007078&groupId=80299&sidebarIssueTask=3951001&sidebarTab=tasks

==== Scope ====
These issues affect the following code repository:

• brackeys.community: services/gitlab/Dockerfile at line 1

==== TLDR ====
It's recommended to pin the version of base images inside of Docker containers. Using a dynamic version can cause unexpected behavior and at worst, can lead to supply chain attacks. On top of that the 'latest' tag does not always automatically refer to the newest version of the image, so it can also lead to using an outdated version of the base image.

==== How to fix ====
Pin the base image by changing FROM image:latest to FROM image:3.17.1

[linear]

BC-191