chore(deps): pin dependencies

it-at-m · Aug 22, 2024 · 43181e8 · 43181e8
1 parent 94b6f14
commit 43181e8
Show file tree

Hide file tree

Showing 8 changed files with 24 additions and 24 deletions.
diff --git a/.github/workflows/dependency_review.yaml b/.github/workflows/dependency_review.yaml
@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4
         with:
           config-file: it-at-m/.github/workflow-configs/dependency_review.yaml@main
diff --git a/.github/workflows/maven.yaml b/.github/workflows/maven.yaml
@@ -30,9 +30,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: "temurin"
@@ -57,7 +57,7 @@ jobs:
           CENTRAL_USERNAME: ${{ secrets.sonatype_username }}
           CENTRAL_PASSWORD: ${{ secrets.sonatype_password }}
       - name: "Upload target artifacts"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4
         with:
           name: target
           path: "**/target"
@@ -69,7 +69,7 @@ jobs:
           git push --force origin ${{ github.ref_name }}-version-bump
       - name: Create pull request
         if: ${{ inputs.snapshot-release == false }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         with:
           script: |
             const { repo, owner } = context.repo;
@@ -104,27 +104,27 @@ jobs:
             path: ./refarch-integrations/refarch-s3-integration/refarch-s3-integration-rest/refarch-s3-integration-rest-service
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Download target artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
         with:
           name: target
       - name: Login to Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract metadata (tags, labels) for image
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
         with:
           images: "${{ env.REGISTRY }}/${{ github.repository }}/${{ matrix.name }}"
           tags: |
             type=raw,value=${{ inputs.release-version }}
             type=raw,value=latest,enable=${{ inputs.snapshot-release == false }}
       - name: Build and push image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6
         with:
           context: ${{ matrix.path }}
           push: true

diff --git a/.github/workflows/pr_labeler.yaml b/.github/workflows/pr_labeler.yaml
@@ -10,6 +10,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Label PR"
-        uses: actions/labeler@v5
+        uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
         with:
           sync-labels: true
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - name: Create GitHub Release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2
         with:
           tag_name: ${{ github.event.inputs.release-version }}
           draft: false

diff --git a/refarch-gateway/Dockerfile b/refarch-gateway/Dockerfile
@@ -1,3 +1,3 @@
-FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:latest
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:latest@sha256:3aeb8ef0e2eef49a4fd2c0e27b631a3b7089435c0fbde1e34afd16a0e95f0f44
 
 COPY target/*.jar /deployments/spring-boot-application.jar
diff --git a/...s3-integration/refarch-s3-integration-rest/refarch-s3-integration-rest-service/Dockerfile b/...s3-integration/refarch-s3-integration-rest/refarch-s3-integration-rest-service/Dockerfile
@@ -1,3 +1,3 @@
-FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:latest
+FROM registry.access.redhat.com/ubi9/openjdk-21-runtime:latest@sha256:3aeb8ef0e2eef49a4fd2c0e27b631a3b7089435c0fbde1e34afd16a0e95f0f44
 
 COPY target/*.jar /deployments/spring-boot-application.jar
diff --git a/stack/docker-compose-refarch-base.yml b/stack/docker-compose-refarch-base.yml
@@ -5,7 +5,7 @@ name: refarch-stack
 services:
   postgres:
     container_name: postgres
-    image: postgres:16.3-alpine3.18
+    image: postgres:16.3-alpine3.18@sha256:64e18e8fb3e9c9aac89ac590c5dd8306b862478404f76cd9b5f7720d012b4c47
     environment:
       - POSTGRES_DB=postgres
       - POSTGRES_USER=admin
@@ -24,7 +24,7 @@ services:
 
   pg-admin:
     container_name: pg-admin
-    image: dpage/pgadmin4:8.10
+    image: dpage/pgadmin4:8.10@sha256:ab92b145c617f3c48ff54ed2cd765210a12e7b4f0d0da7897d944b2a90203910
     environment:
       - [email protected]
       - PGADMIN_DEFAULT_PASSWORD=admin
@@ -39,7 +39,7 @@ services:
 
   keycloak:
     container_name: keycloak
-    image: quay.io/keycloak/keycloak:20.0.5
+    image: quay.io/keycloak/keycloak:20.0.5@sha256:054ef67eb7dae0129bbb9eb0e0797fd2392cd6d135094a6063ae7ff7773ef81f
     command:
       - start-dev --http-relative-path /auth
     depends_on:
@@ -66,7 +66,7 @@ services:
 
   db-postgres-keycloak:
     container_name: db-postgres-keycloak
-    image: postgres:16.3-alpine3.18
+    image: postgres:16.3-alpine3.18@sha256:64e18e8fb3e9c9aac89ac590c5dd8306b862478404f76cd9b5f7720d012b4c47
     environment:
       - POSTGRES_DB=keycloak
       - POSTGRES_USER=keycloak-user
@@ -81,7 +81,7 @@ services:
 
   init-keycloak:
     container_name: init-keycloak
-    image: klg71/keycloakmigration:0.2.67
+    image: klg71/keycloakmigration:0.2.67@sha256:ca5659d0f2907e77f50f2ccda4f0848f7fbd038c8d59024c0659f5256861d244
     depends_on:
       - keycloak
     environment:
@@ -98,7 +98,7 @@ services:
 
   refarch-gateway:
     container_name: refarch-gateway
-    image: ghcr.io/it-at-m/refarch/refarch-gateway:1.0.0
+    image: ghcr.io/it-at-m/refarch/refarch-gateway:1.0.0@sha256:78af746de560bae737e2ea476bd1759f4dd360ff9f2bb7647b8ed27599ed66ed
     depends_on:
       init-keycloak:
         condition: service_completed_successfully

diff --git a/stack/docker-compose.yml b/stack/docker-compose.yml
@@ -4,7 +4,7 @@ services:
   # s3
   minio:
     container_name: minio
-    image: quay.io/minio/minio:RELEASE.2024-08-17T01-24-54Z
+    image: quay.io/minio/minio:RELEASE.2024-08-17T01-24-54Z@sha256:6f23072e3e222e64fe6f86b31a7f7aca971e5129e55cbccef649b109b8e651a1
     command: server /data --console-address ":9001"
     environment:
       MINIO_ROOT_USER: minio
@@ -24,7 +24,7 @@ services:
 
   init-minio:
     container_name: init-minio
-    image: minio/mc:RELEASE.2024-08-17T11-33-50Z
+    image: minio/mc:RELEASE.2024-08-17T11-33-50Z@sha256:87382ad79da9f464a444aab607b3db9251c7fe7d1bfda0eb86cbacee2ca2b564
     depends_on:
       - minio
     entrypoint: >
@@ -40,7 +40,7 @@ services:
   # mail
   mailpit:
     container_name: mailpit
-    image: axllent/mailpit:v1.20.2
+    image: axllent/mailpit:v1.20.2@sha256:e6520318d3e6164b5f4213e9906ab01b17bf8eb01923d1d3458ea76ce2039254
     ports:
       - '1025:1025' # smtp server
       - '8025:8025' # ui