build: pin dependencies

[yxtay]

No description provided.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	1		0	0.03s
✅ COPYPASTE	jscpd	yes		no	1.02s
✅ EDITORCONFIG	editorconfig-checker	3		0	0.04s
✅ REPOSITORY	checkov	yes		no	12.2s
⚠️ REPOSITORY	devskim	yes		1	1.01s
✅ REPOSITORY	dustilock	yes		no	0.0s
✅ REPOSITORY	gitleaks	yes		no	0.76s
✅ REPOSITORY	git_diff	yes		no	0.0s
✅ REPOSITORY	grype	yes		no	9.67s
⚠️ REPOSITORY	kics	yes		6	2.25s
✅ REPOSITORY	secretlint	yes		no	0.93s
✅ REPOSITORY	syft	yes		no	1.13s
✅ REPOSITORY	trivy	yes		no	5.47s
✅ REPOSITORY	trivy-sbom	yes		no	0.08s
✅ REPOSITORY	trufflehog	yes		no	3.07s
✅ SPELL	lychee	1		0	0.09s
✅ YAML	prettier	1	0	0	0.42s
✅ YAML	v8r	1		0	2.55s
✅ YAML	yamllint	1		0	0.31s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff