build(konflux): lock base image by digest #548

Namespace: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured" rel="nofollow">discovery-tenant
PipelineRun: <a href="https://konflux.apps.stone-prod-p02.hjvn.p1.openshiftapps.com/application-pipeline/ns/discovery-tenant/pipelinerun/discovery-ui-on-pull-request-mcz9p" rel="nofollow">discovery-ui-on-pull-request-mcz9p

Success

Konflux Production Internal/discovery-ui-on-pull-request has successfully validated your commit.

Status	Duration	Name
✅ Succeeded	7 seconds	init
✅ Succeeded	17 seconds	clone-repository
✅ Succeeded	27 seconds	prefetch-dependencies
✅ Succeeded	2 minutes	build-container
✅ Succeeded	5 seconds	build-image-index
✅ Succeeded	9 seconds	deprecated-base-image-check
✅ Succeeded	1 minute	clair-scan
✅ Succeeded	1 minute	clamav-scan
✅ Succeeded	3 minutes	sast-unicode-check
✅ Succeeded	17 seconds	sast-snyk-check
✅ Succeeded	24 seconds	ecosystem-cert-preflight-checks
✅ Succeeded	1 minute	coverity-availability-check
✅ Succeeded	3 minutes	build-source-image
✅ Succeeded	11 seconds	rpms-signature-scan
✅ Succeeded	5 seconds	apply-tags
✅ Succeeded	4 minutes	push-dockerfile
✅ Succeeded	39 seconds	sast-shell-check
✅ Succeeded	23 seconds	show-summary
✅ Succeeded	7 seconds	show-sbom