Pin dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -26,8 +26,8 @@ jobs:
           - integrationTestMounts
           - integrationTestXenitEndpoints
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-java@v4
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
         with:
           distribution: 'temurin'
           java-version: '11'
@@ -42,15 +42,15 @@ jobs:
         run: |
           echo '${{ secrets.HARBOR_PASSWORD }}' | docker login docker.xenit.eu --username '${{ secrets.HARBOR_USER }}' --password-stdin
       - name: Integration tests
-        uses: gradle/gradle-build-action@v3
+        uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3
         env:
           VERSIONS_TO_BUILD: ${{ matrix.version }}
         with:
           cache-read-only: false
           arguments: ${{ matrix.task }} --info
       - name: Upload Artifact
         if: success() || failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ matrix.task }}-result
           path: /home/runner/work/**/build/reports
@@ -64,17 +64,17 @@ jobs:
         version:
           - solr6
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
       - name: Setup Gradle
-        uses: gradle/gradle-build-action@v3
+        uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3
       - name: Login to docker repo
         run: |
           echo '${{ secrets.HARBOR_PASSWORD }}' | docker login docker.xenit.eu --username '${{ secrets.HARBOR_USER }}' --password-stdin
       # We have to split out publishing to public and private repo's because pushing to docker.io does not seem to work
       # without supplying DOCKER_USER and DOCKER_PASSWORD. However, supplying those environment variables breaks
       # publishing to other repositories
       - name: Publish public docker images
-        uses: gradle/gradle-build-action@v3
+        uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3
         env:
           DOCKER_USER: ${{ secrets.DOCKER_USER }}
           DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
@@ -83,7 +83,7 @@ jobs:
           cache-read-only: false
           arguments: pushDockerImage -PincludeEnterprise=false
       - name: Publish private docker images
-        uses: gradle/gradle-build-action@v3
+        uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3
         env:
           VERSIONS_TO_BUILD: ${{ matrix.version }}
         with:

src/integrationTest/resources/docker-compose-db.yml

@@ -2,7 +2,7 @@ version: '3'
 
 services:
  postgresql:
-   image: docker.io/xenit/postgres
+   image: docker.io/xenit/postgres@sha256:d9c3e2a7c41c668835adb8752b17ad1506dcd38744a0c67ca90699a7be4b7e80
    environment:
    - POSTGRES_USER=alfresco
    - POSTGRES_PASSWORD=admin

src/integrationTest/resources/docker-compose-localstack.yml

@@ -3,7 +3,7 @@ version: '3'
 services:
   localstack:
     container_name: localstack
-    image: localstack/localstack:2.3.2
+    image: localstack/localstack:2.3.2@sha256:c396d899a3cdc038ba6bb82d54a40f12c037004b93c3e1efc4c821db60306f79
     ports:
       - "4566:4566"
     environment:

src/main/resources/dockerfiles/Dockerfile.solr6

@@ -1,5 +1,5 @@
-ARG BASE_IMAGE=docker.io/xenit/openjdk:alfresco-6.1-ubuntu
-FROM	alpine:latest AS build-stage-solr6
+ARG BASE_IMAGE=docker.io/xenit/openjdk:alfresco-6.1-ubuntu@sha256:d49df9fb6638b816e979445cff3997122b63a7a81c1864788827ac6ad1964d37
+FROM	alpine:latest@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659 AS build-stage-solr6
 
 ARG SOLR_VERSION_MAJOR
 ARG SOLR_VERSION_MINOR