chore(deps): pin dependencies

Author: renovate[bot]

.circleci/config.yml

@@ -60,7 +60,7 @@ jobs:
   build_docker:
     resource_class: small
     docker:
-      - image: cimg/base:2025.01
+      - image: cimg/base:2025.01@sha256:f6b81723236539a091130e4f0e57c599253abf2e3980aa4e60eeee871b4e2ef7
     steps:
       - checkout
       - setup_remote_docker
@@ -72,7 +72,7 @@ jobs:
   publish_docker:
     resource_class: small
     docker:
-      - image: cimg/base:2025.01
+      - image: cimg/base:2025.01@sha256:f6b81723236539a091130e4f0e57c599253abf2e3980aa4e60eeee871b4e2ef7
     steps:
       - checkout
       - setup_remote_docker

Dockerfile

@@ -1,11 +1,11 @@
-FROM golang:1.23-alpine AS build_go
+FROM golang:1.23-alpine@sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596 AS build_go
 ARG cmd
 WORKDIR work
 COPY . .
 RUN go install ./cmd/${cmd}
 
 # Start fresh from a smaller image
-FROM alpine:3
+FROM alpine:3@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 ARG cmd
 COPY --from=build_go /go/bin/${cmd} /app
 WORKDIR /data