From c834f7ef58fa73299f62c82aae0f625397b4928b Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Thu, 19 Mar 2026 09:22:10 +0100
Subject: [PATCH] [bitnami/kaniko] Release 1.25.12-debian-12-r0 (#91720)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 bitnami/kaniko/1/debian-12/Dockerfile | 10 +++++-----
 bitnami/kaniko/README.md              |  8 ++++++++
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/bitnami/kaniko/1/debian-12/Dockerfile b/bitnami/kaniko/1/debian-12/Dockerfile
index c33bb6d100d8..b3709b263f0a 100644
--- a/bitnami/kaniko/1/debian-12/Dockerfile
+++ b/bitnami/kaniko/1/debian-12/Dockerfile
@@ -7,13 +7,13 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-03-06T07:43:28Z" \
+      org.opencontainers.image.created="2026-03-19T08:12:11Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/kaniko/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/kaniko" \
       org.opencontainers.image.title="kaniko" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="1.25.11"
+      org.opencontainers.image.version="1.25.12"
 
 ENV HOME="/root" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -28,7 +28,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "kaniko-1.25.11-1-linux-${OS_ARCH}-debian-12" \
+      "kaniko-1.25.12-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -44,11 +44,11 @@ RUN apt-get update && apt-get upgrade -y && \
 RUN uninstall_packages curl
 
 RUN mkdir -p /kaniko/.docker /etc && for bin in /opt/bitnami/kaniko/bin/*; do ln -s $bin /kaniko/; done && chmod 775 /kaniko && cp /opt/bitnami/kaniko/nsswitch/nsswitch.conf /etc/nsswitch.conf
-ENV APP_VERSION="1.25.11" \
+ENV APP_VERSION="1.25.12" \
     BITNAMI_APP_NAME="kaniko" \
     DOCKER_CONFIG="/kaniko/.docker" \
     DOCKER_CREDENTIAL_GCR_CONFIG="/kaniko/.config/gcloud/docker_credential_gcr_config.json" \
-    IMAGE_REVISION="1" \
+    IMAGE_REVISION="0" \
     PATH="/kaniko:$PATH" \
     SSL_CERT_DIR="/etc/ssl/certs/" \
     USER="root"
diff --git a/bitnami/kaniko/README.md b/bitnami/kaniko/README.md
index 53daf23bf43e..8f4cc8e7d505 100644
--- a/bitnami/kaniko/README.md
+++ b/bitnami/kaniko/README.md
@@ -110,6 +110,14 @@ Check the [official Kaniko documentation](https://github.com/chainguard-dev/kani
 
 - The `docker-compose.yaml` file has been removed, as it was solely intended for internal testing purposes.
 
+
+### FIPS configuration in Bitnami Secure Images
+
+The Bitnami Kaniko Docker image from the [Bitnami Secure Images](https://go-vmware.broadcom.com/contact-us) catalog includes extra features and settings to configure the container with FIPS capabilities. You can configure the next environment variables:
+
+- `OPENSSL_FIPS`: whether OpenSSL runs in FIPS mode or not. `yes` (default), `no`.
+- `GODEBUG`: controls Go FIPS mode. Use `fips140=only` (restricted), `fips140=on` (relaxed), or `fips140=off` (disabled).
+
 ## License
 
 Copyright &copy; 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.