From 1bfd41d3080862ad99be605b20a2e8b800d98879 Mon Sep 17 00:00:00 2001
From: Yang Xiufeng <yangxiufeng.c@gmail.com>
Date: Sat, 26 Sep 2026 16:19:09 +0800
Subject: [PATCH] fix(ci): replace inaccessible MinIO image

---
 tests/docker-compose.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tests/docker-compose.yaml b/tests/docker-compose.yaml
index e65fe097..be0bbf09 100644
--- a/tests/docker-compose.yaml
+++ b/tests/docker-compose.yaml
@@ -1,6 +1,10 @@
 services:
   minio:
-    image: quay.io/minio/minio:RELEASE.2025-09-07T16-13-09Z
+    # Official MinIO registries no longer allow anonymous pulls. Pin the
+    # Chainguard image by digest to keep integration tests reproducible.
+    image: cgr.dev/chainguard/minio@sha256:bd014394a80898e68c149f2311fdf8d5a2c2f3bb2c33b9327ae6d02b4b065ae1
+    # The image defaults to a non-root user that cannot write to ./data.
+    user: "0:0"
     command: server /data
     ports:
       - "9000:9000"