Pin wharfie version in harvester-os Dockerfile

Signed-off-by: Kiefer Chang <kiefer.chang@suse.com>

Author: bk201

package/harvester-os/Dockerfile

@@ -2,7 +2,18 @@ ARG BASE_OS_IMAGE
 FROM ${BASE_OS_IMAGE}
 
 ARG ARCH=amd64
-RUN curl -sfL https://github.com/rancher/wharfie/releases/download/v0.6.8/wharfie-${ARCH}  -o /usr/bin/wharfie && chmod +x /usr/bin/wharfie
+
+# renovate: datasource=github-release-attachments depName=rancher/wharfie
+ARG WHARFIE_VERSION=v0.6.8
+# renovate: datasource=github-release-attachments depName=rancher/wharfie digestVersion=v0.6.8
+ARG WHARFIE_SUM_amd64=e6b5d27e5b5815ece828e3d2f4012ccec1e40dceb4e639815d6cdbc0f22e2fa8
+# renovate: datasource=github-release-attachments depName=rancher/wharfie digestVersion=v0.6.8
+ARG WHARFIE_SUM_arm64=36e50fdd08577cd2adea613141c58830cb73ab4d46ef3f90db62337075518a2d
+ENV WHARFIE_SUM="WHARFIE_SUM_${ARCH}"
+
+RUN curl -sfL https://github.com/rancher/wharfie/releases/download/${WHARFIE_VERSION}/wharfie-${ARCH} -o /usr/bin/wharfie \
+    && echo "${!WHARFIE_SUM}" /usr/bin/wharfie | sha256sum -c - \
+    && chmod +x /usr/bin/wharfie
 
 COPY files/ /
 RUN chmod 0600 /system/oem/*