Dockpin makes it easy to update your pinned versions, but automatic is even better than easy.
Maybe we should talk to the dependabot folks and see if they can run dockpin apt pin for us. (Dependabot can already bump Dockerfile digests to the latest version. I only implemented that in Dockpin so you can pin before submitting, and because dependabot doesn't pin unpinned images.)
Dockpin makes it easy to update your pinned versions, but automatic is even better than easy.
Maybe we should talk to the dependabot folks and see if they can run
dockpin apt pinfor us. (Dependabot can already bump Dockerfile digests to the latest version. I only implemented that in Dockpin so you can pin before submitting, and because dependabot doesn't pin unpinned images.)