update base images and improved docker scout value

Author: christophdb

.github/workflows/build-image-on-push.yml

@@ -106,6 +106,8 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           context: ${{ needs.init-vars.outputs.component }}
+          provenance: true
+          sbom: true
           # Load build result to `docker images`
           load: true
           tags: |

runner/Dockerfile

@@ -1,4 +1,6 @@
-FROM python:3.11-alpine AS compile-image
+ARG BASE_IMAGE="python:3.12.10-alpine@sha256:9c51ecce261773a684c8345b2d4673700055c513b4d54bc0719337d3e4ee552e"
+
+FROM ${BASE_IMAGE} AS compile-image
 
 RUN apk add --no-cache \
         cargo \
@@ -35,9 +37,8 @@ RUN pip install --upgrade setuptools && \
     pip install --upgrade --user setuptools && \
     pip install -r requirements.txt --no-cache-dir --user
 
-
 ## Runtime image
-FROM python:3.11-alpine AS runtime-image
+FROM ${BASE_IMAGE} AS runtime-image
 
 RUN apk add --no-cache bash \
                        python3-dev

scheduler/Dockerfile

@@ -1,5 +1,5 @@
-### Compile Image
-FROM python:3.11-slim-bookworm AS compile-image
+ARG BASE_IMAGE="python:3.12-slim-bookworm@sha256:31a416db24bd8ade7dac5fd5999ba6c234d7fa79d4add8781e95f41b187f4c9a"
+FROM ${BASE_IMAGE} AS compile-image
 
 # Installation of the pip packages
 WORKDIR /opt/scheduler
@@ -8,7 +8,7 @@ RUN pip3 install -r /opt/scheduler/requirements.txt --user
 
 
 ### Runtime Image
-FROM python:3.11-slim-bookworm AS runtime-image
+FROM ${BASE_IMAGE} AS runtime-image
 
 # Clean up && Installation of the apt packages
 RUN apt-get update --fix-missing && \

starter/Dockerfile

@@ -1,5 +1,5 @@
-### Compile Image
-FROM python:3.11-slim-bookworm AS compile-image
+ARG BASE_IMAGE="python:3.12-slim-bookworm@sha256:31a416db24bd8ade7dac5fd5999ba6c234d7fa79d4add8781e95f41b187f4c9a"
+FROM ${BASE_IMAGE} AS compile-image
 
 RUN apt-get update --fix-missing && \
     apt-get install -y gcc
@@ -13,7 +13,7 @@ RUN pip install --upgrade setuptools && \
     pip install -r /opt/seatable-python-starter/requirements.txt --user --break-system-packages
 
 ### Runtime image
-FROM python:3.11-slim-bookworm AS runtime-image
+FROM ${BASE_IMAGE} AS runtime-image
 
 RUN apt-get update --fix-missing && \
     apt-get autoremove -y && \