Merge pull request #33 from planetscale/renovate/pin-dependencies

chore(deps): pin dependencies

Author: joemiller

.github/workflows/ci.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && !contains(toJson(github.event.commits), '[ci skip]') && !contains(toJson(github.event.commits), '[skip ci]')
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - run: make lint
       - run: make test
 
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout code with full history (unshallow)
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
 

.github/workflows/licensing.yaml

@@ -14,7 +14,7 @@ jobs:
   licensing:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
       - run: sudo gem install license_finder

.github/workflows/self-test.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: modify some files
         run: |

Dockerfile

@@ -1,6 +1,6 @@
-FROM ghcr.io/planetscale/ghcommit:v0.1.16 AS ghcommit
+FROM ghcr.io/planetscale/ghcommit:v0.1.16@sha256:01f932350dcbc96dfac18f34305683d3c2db5e46a92a25d3f7f5897eb6796d6c AS ghcommit
 
-FROM pscale.dev/wolfi-prod/base:latest AS base
+FROM pscale.dev/wolfi-prod/base:latest@sha256:e0d90cabe07563f8145923c0ffcd7628df2d1187cce98e19abf2598bac78f8c9 AS base
 
 COPY --from=ghcommit /ghcommit /usr/bin/ghcommit
 

docker-compose.yml

@@ -1,7 +1,7 @@
 version: '2'
 services:
   lint:
-    image: koalaman/shellcheck-alpine:v0.8.0
+    image: koalaman/shellcheck-alpine:v0.8.0@sha256:f42fde76d2d14a645a848826e54a4d650150e151d9c81057c898da89a82c8a56
     volumes:
       - ".:/plugin:ro"
     entrypoint: sh
@@ -10,6 +10,6 @@ services:
       - 'shellcheck ./plugin/*.sh'
 
   tests:
-    image: buildkite/plugin-tester:v4.0.0
+    image: buildkite/plugin-tester:v4.0.0@sha256:73958fc0768b18ec691e9def050dbc25f814411c9901abfac8cd1f2f361ce8d5
     volumes:
       - ".:/plugin:ro"