Skip to content

Commit 02f1717

Browse files
Pin dependencies
1 parent 3ad2d09 commit 02f1717

7 files changed

Lines changed: 27 additions & 27 deletions

File tree

.github/workflows/build-and-push-image.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -73,15 +73,15 @@ jobs:
7373
tag-prefix: "api-"
7474
aca_name_secret: "ACA_CONTAINERAPP_API_NAME"
7575
steps:
76-
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/build@v5.2.1
76+
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/build@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 # v5.2.1
7777
with:
7878
image-name: ${{ needs.set-env.outputs.image-name }}
7979
build-args: CI=true
8080
build-file-name: ./Dockerfile.${{ matrix.image }}
8181
tag-prefix: ${{ matrix.tag-prefix }}
8282
github-token: ${{ secrets.GITHUB_TOKEN }}
8383

84-
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/import@v5.2.1
84+
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/import@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 # v5.2.1
8585
with:
8686
image-name: ${{ needs.set-env.outputs.image-name }}
8787
tag-prefix: ${{ matrix.tag-prefix }}
@@ -98,7 +98,7 @@ jobs:
9898
- id: annotate
9999
run: echo "ANNOTATE_RELEASE=${{ matrix.image == 'web' && 'yes' || 'no' }}" >> $GITHUB_ENV
100100

101-
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/deploy@v5.2.1
101+
- uses: DFE-Digital/deploy-azure-container-apps-action/.github/actions/deploy@8e72e403f05ff9da09668207eef1d79e1ce9d1a7 # v5.2.1
102102
with:
103103
image-name: ${{ needs.set-env.outputs.image-name }}
104104
tag-prefix: ${{ matrix.tag-prefix }}

.github/workflows/cypress-lint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,10 @@ jobs:
1515

1616
steps:
1717
- name: Checkout code
18-
uses: actions/checkout@v4
18+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1919

2020
- name: Setup Node.js
21-
uses: actions/setup-node@v4
21+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
2222
with:
2323
node-version: '20'
2424
cache: 'npm'

.github/workflows/cypress-tests.yml

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747

4848
steps:
4949
- name: Checkout code
50-
uses: actions/checkout@v4
50+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
5151
with:
5252
ref: ${{ github.ref }}
5353

@@ -68,7 +68,7 @@ jobs:
6868

6969
- name: Upload screenshots on failure
7070
if: failure()
71-
uses: actions/upload-artifact@v4
71+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
7272
with:
7373
name: screenshots-${{ inputs.environment }}-smoke
7474
path: ${{ env.WORKING_DIRECTORY }}/cypress/screenshots
@@ -94,7 +94,7 @@ jobs:
9494
9595
- name: Upload test results
9696
if: always()
97-
uses: actions/upload-artifact@v4
97+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
9898
with:
9999
name: test-results-smoke
100100
path: ${{ env.WORKING_DIRECTORY }}/cypress/reports/merged/*.json
@@ -132,7 +132,7 @@ jobs:
132132

133133
steps:
134134
- name: Checkout code
135-
uses: actions/checkout@v4
135+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
136136
with:
137137
ref: ${{ github.ref }}
138138

@@ -154,7 +154,7 @@ jobs:
154154

155155
- name: Upload screenshots on failure
156156
if: failure()
157-
uses: actions/upload-artifact@v4
157+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
158158
with:
159159
name: screenshots-${{ inputs.environment }}-${{ matrix.group }}
160160
path: ${{ env.WORKING_DIRECTORY }}/cypress/screenshots
@@ -180,7 +180,7 @@ jobs:
180180
181181
- name: Upload test results
182182
if: always()
183-
uses: actions/upload-artifact@v4
183+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
184184
with:
185185
name: test-results-${{ matrix.group }}
186186
path: ${{ env.WORKING_DIRECTORY }}/cypress/reports/merged/*.json
@@ -196,10 +196,10 @@ jobs:
196196

197197
steps:
198198
- name: Checkout code
199-
uses: actions/checkout@v4
199+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
200200

201201
- name: Setup Node.js
202-
uses: actions/setup-node@v4
202+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
203203
with:
204204
node-version: '18'
205205
cache: 'npm'
@@ -210,7 +210,7 @@ jobs:
210210
run: npm ci --ignore-scripts
211211

212212
- name: Download all test results
213-
uses: actions/download-artifact@v4
213+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
214214
with:
215215
pattern: test-results-*
216216
path: ${{ env.WORKING_DIRECTORY }}/cypress/reports/mocha
@@ -223,7 +223,7 @@ jobs:
223223
npm run generate:html:report
224224
225225
- name: Upload combined report
226-
uses: actions/upload-artifact@v4
226+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
227227
with:
228228
name: cypress-report-${{ inputs.environment }}
229229
path: ${{ env.WORKING_DIRECTORY }}/mochareports
@@ -248,10 +248,10 @@ jobs:
248248

249249
steps:
250250
- name: Checkout code
251-
uses: actions/checkout@v4
251+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
252252

253253
- name: Setup Node.js
254-
uses: actions/setup-node@v4
254+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
255255
with:
256256
node-version: '18'
257257
cache: 'npm'
@@ -262,7 +262,7 @@ jobs:
262262
run: npm ci --ignore-scripts
263263

264264
- name: Download test results
265-
uses: actions/download-artifact@v4
265+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
266266
with:
267267
pattern: test-results-smoke
268268
path: ${{ env.WORKING_DIRECTORY }}/cypress/reports/mocha
@@ -275,7 +275,7 @@ jobs:
275275
npm run generate:html:report
276276
277277
- name: Upload report
278-
uses: actions/upload-artifact@v4
278+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
279279
with:
280280
name: cypress-report-${{ inputs.environment }}
281281
path: ${{ env.WORKING_DIRECTORY }}/mochareports

Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects.API/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
# See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging.
22

33
# This stage is used when running from VS in fast mode (Default for Debug configuration)
4-
FROM mcr.microsoft.com/dotnet/aspnet:8.0-azurelinux3.0 AS base
4+
FROM mcr.microsoft.com/dotnet/aspnet:8.0-azurelinux3.0@sha256:0456c8bc40434bba2a99949ecc104de1cdacf41cb7d6981339239b7f20ea5371 AS base
55
USER $APP_UID
66
WORKDIR /app
77
EXPOSE 3001
88
EXPOSE 3000
99

1010
# This stage is used to build the service project
11-
FROM mcr.microsoft.com/dotnet/sdk:8.0-azurelinux3.0 AS build
11+
FROM mcr.microsoft.com/dotnet/sdk:8.0-azurelinux3.0@sha256:f528f787d6b658252bab774a3419287b9de5af0f9d9d5250c093caa9d432a68d AS build
1212
ARG BUILD_CONFIGURATION=Release
1313
WORKDIR /src
1414
COPY ["Dfe.ManageFreeSchoolProjects.API/Dfe.ManageFreeSchoolProjects.API.csproj", "Dfe.ManageFreeSchoolProjects.API/"]

Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects.Data/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,12 @@
22
# See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging.
33

44
# This stage is used when running from VS in fast mode (Default for Debug configuration)
5-
FROM mcr.microsoft.com/dotnet/runtime:8.0 AS base
5+
FROM mcr.microsoft.com/dotnet/runtime:8.0@sha256:b969aeab7f6b14fcf00f55f420d730df228a93b4731402ca2f8eeb41da5d39c8 AS base
66
USER $APP_UID
77
WORKDIR /app
88

99
# This stage is used to build the service project
10-
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
10+
FROM mcr.microsoft.com/dotnet/sdk:8.0@sha256:58359d0b8fe8237be1d63ac335ca378e2857f976c7f92791f7c84b3c117037f5 AS build
1111
ARG BUILD_CONFIGURATION=Release
1212
WORKDIR /src
1313

Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
# See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging.
22

33
# This stage is used when running from VS in fast mode (Default for Debug configuration)
4-
FROM mcr.microsoft.com/dotnet/aspnet:8.0-azurelinux3.0 AS base
4+
FROM mcr.microsoft.com/dotnet/aspnet:8.0-azurelinux3.0@sha256:0456c8bc40434bba2a99949ecc104de1cdacf41cb7d6981339239b7f20ea5371 AS base
55

66
USER $APP_UID
77
WORKDIR /app
88
EXPOSE 5001
99
EXPOSE 5000
1010

1111
# This stage is used to build the service project
12-
FROM mcr.microsoft.com/dotnet/sdk:8.0-azurelinux3.0 AS build
12+
FROM mcr.microsoft.com/dotnet/sdk:8.0-azurelinux3.0@sha256:f528f787d6b658252bab774a3419287b9de5af0f9d9d5250c093caa9d432a68d AS build
1313
ARG BUILD_CONFIGURATION=Release
1414
WORKDIR /src
1515
COPY ["Dfe.ManageFreeSchoolProjects/Dfe.ManageFreeSchoolProjects.csproj", "Dfe.ManageFreeSchoolProjects/"]

Stack/docker-compose.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
services:
22
mfspsqldb:
3-
image: mcr.microsoft.com/azure-sql-edge:latest
3+
image: mcr.microsoft.com/azure-sql-edge:latest@sha256:902628a8be89e35dfb7895ca31d602974c7bafde4d583a0d0873844feb1c42cf
44
environment:
55
ACCEPT_EULA: Y
66
MSSQL_SA_PASSWORD: mySuperStrong_pa55word!!!
@@ -15,7 +15,7 @@ services:
1515
restart: always
1616

1717
mfspsqldb.configurator:
18-
image: mcr.microsoft.com/mssql/server:2022-latest
18+
image: mcr.microsoft.com/mssql/server:2022-latest@sha256:0ec7739e1c5ec2f57861facbe1f2b74f1d3e147c7c97edf91eeea920c5944d9c
1919
volumes:
2020
- ./init:/initdb.d
2121
networks:

0 commit comments

Comments
 (0)