Bump Go and pin all Docker images to digests

DEVELOP.md

@@ -4,7 +4,7 @@
 
 The following dependencies are required for local development:
 
-- [Go](https://golang.org/dl/) >= 1.15.5
+- [Go](https://golang.org/dl/) >= 1.15.6
 - [Docker](https://docs.docker.com/engine/install/) / moby-engine >= 19.03
 - [Tilt](http://tilt.dev/) >= 0.17.10
 - Any of the local Kubernetes clusters supported by Tilt. 

Dockerfile.agent

@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:experimental@sha256:de85b2f3a3e8a2f7fe48e8e84a65f6fdd5cd5183afa6412fff9caa6871649c44
-FROM rust:1.48
+FROM rust:1.48@sha256:65e254fff15478af71d342706b1e73b26fd883f3432813c129665a97a74e2278
 
 RUN apt-get update && apt-get install -y libssl-dev libudev-dev pkg-config zlib1g-dev llvm clang ncat
 RUN rustup component add rustfmt

bridge/Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:experimental@sha256:de85b2f3a3e8a2f7fe48e8e84a65f6fdd5cd5183afa6412fff9caa6871649c44
-FROM golang:1.15.5
+FROM golang:1.15.6@sha256:de97bab9325c4c3904f8f7fec8eb469169a1d247bdc97dcab38c2c75cf4b4c5d
 
 WORKDIR /app
 

dev-install.sh

@@ -43,7 +43,7 @@ export PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/sbin:/bin
 
 # Install Go binaries.
 ARCH=amd64
-GO=1.15.5
+GO=1.15.6
 # TODO(leo): verify checksum
 
 (

docs/operations.md

@@ -49,7 +49,7 @@ Wormhole binaries from source. A Git repo is much harder to tamper with than rel
 
 To build Wormhole, you need:
 
-- [Go](https://golang.org/dl/) >= 1.15.5
+- [Go](https://golang.org/dl/) >= 1.15.6
 - [Rust](https://www.rust-lang.org/learn/get-started) >= 1.47.0
 
 ...plus the same library dependencies as Solana itself:

ethereum/Dockerfile

@@ -1,8 +1,8 @@
 # syntax=docker.io/docker/dockerfile:experimental@sha256:de85b2f3a3e8a2f7fe48e8e84a65f6fdd5cd5183afa6412fff9caa6871649c44
-FROM node:lts-alpine
+FROM node:lts-alpine@sha256:2ae9624a39ce437e7f58931a5747fdc60224c6e40f8980db90728de58e22af7c
 
 # npm wants to clone random Git repositories - lovely.
-RUN apk add git python make
+RUN apk add git python make build-base
 
 # Run as user, otherwise, npx explodes.
 USER 1000

solana/Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:experimental@sha256:de85b2f3a3e8a2f7fe48e8e84a65f6fdd5cd5183afa6412fff9caa6871649c44
-FROM rust:1.48
+FROM rust:1.48@sha256:65e254fff15478af71d342706b1e73b26fd883f3432813c129665a97a74e2278
 
 RUN apt-get update && apt-get install -y libssl-dev libudev-dev pkg-config zlib1g-dev llvm clang
 RUN rustup component add rustfmt

terra/Dockerfile

@@ -1,13 +1,13 @@
 # This is a multi-stage docker file, first stage builds contracts
 # And the second one creates node.js environment to deploy them
-FROM cosmwasm/workspace-optimizer:0.10.4 AS builder
+FROM cosmwasm/workspace-optimizer:0.10.4@sha256:a976db4ee7add887a6af26724b804bbd9e9d534554506447e72ac57e65357db9 AS builder
 ADD Cargo.lock /code/
 ADD Cargo.toml /code/
 ADD contracts /code/contracts
 RUN optimize_workspace.sh
 
 # Contract deployment stage
-FROM node:14
+FROM node:14@sha256:04a33dac55af8d3170bffc91ca31fe8000b96ae1bab1a090deb920ca2ca2a38e
 
 RUN npm update && npm i -g typescript ts-node
 
@@ -23,4 +23,4 @@ RUN npm install
 
 RUN ts-node --version
 
-ENTRYPOINT /app/tools/deploy.sh
+ENTRYPOINT /app/tools/deploy.sh

terra/devnet/Dockerfile

@@ -1,3 +1,3 @@
-FROM terramoney/localterra-core:0.4.5
+FROM terramoney/localterra-core:0.4.5@sha256:ff4f342325c81dc19fad216c2e3c2aa8777d9dc36bc3521a206ec321864da4e3
 
-ADD config /root/.terrad/config
+ADD config /root/.terrad/config

third_party/abigen/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.15.5-alpine
+FROM golang:1.15.6-alpine@sha256:49b4eac11640066bc72c74b70202478b7d431c7d8918e0973d6e4aeb8b3129d2
 
 RUN apk add curl git gcc libc-dev linux-headers
 

third_party/solana/Dockerfile

@@ -3,7 +3,7 @@
 # Depend on our smart contract build - it's going to be linked directly into Solana as part the patch we carry.
 FROM solana-contract as contract
 
-FROM rust:1.48
+FROM rust:1.48@sha256:65e254fff15478af71d342706b1e73b26fd883f3432813c129665a97a74e2278
 
 RUN apt-get update && apt-get install -y libssl-dev libudev-dev pkg-config zlib1g-dev llvm clang
 RUN rustup component add rustfmt

web/Dockerfile

@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:experimental
 
 # Derivative of ethereum/Dockerfile, look there for an explanation on how it works.
-FROM node:lts-alpine
+FROM node:lts-alpine@sha256:2ae9624a39ce437e7f58931a5747fdc60224c6e40f8980db90728de58e22af7c
 
 USER 1000
 RUN mkdir -p /home/node/app