Pin dependencies - autoclosed

api/Dockerfile

@@ -1,4 +1,4 @@
-FROM buildpack-deps:bookworm AS isolate
+FROM buildpack-deps:bookworm@sha256:bcff3759f997a1ecdc75d00f01350a5e0ce20992ab395295b2b23f436445d725 AS isolate
 RUN apt-get update && \
     apt-get install -y --no-install-recommends git libcap-dev && \
     rm -rf /var/lib/apt/lists/* && \

api/package.json

@@ -4,16 +4,16 @@
     "description": "API for piston - a high performance code execution engine",
     "main": "src/index.js",
     "dependencies": {
-        "body-parser": "^1.19.0",
-        "chownr": "^2.0.0",
-        "express": "^4.17.3",
-        "express-ws": "^5.0.2",
-        "is-docker": "^2.1.1",
-        "logplease": "^1.2.15",
+        "body-parser": "1.19.2",
+        "chownr": "2.0.0",
+        "express": "4.17.3",
+        "express-ws": "5.0.2",
+        "is-docker": "2.1.1",
+        "logplease": "1.2.15",
         "nocamel": "HexF/nocamel#patch-1",
-        "node-fetch": "^2.6.1",
-        "semver": "^7.3.4",
-        "uuid": "^8.3.2"
+        "node-fetch": "2.6.1",
+        "semver": "7.3.5",
+        "uuid": "8.3.2"
     },
     "license": "MIT"
 }

cli/package.json

@@ -5,12 +5,12 @@
     "main": "index.js",
     "license": "MIT",
     "dependencies": {
-        "axios": "^0.21.2",
-        "chalk": "^4.1.0",
-        "minimatch": "^3.0.4",
-        "nocamel": "^1.0.2",
-        "semver": "^7.3.5",
-        "ws": "^7.5.3",
-        "yargs": "^16.2.0"
+        "axios": "0.21.2",
+        "chalk": "4.1.0",
+        "minimatch": "3.0.4",
+        "nocamel": "1.0.2",
+        "semver": "7.3.5",
+        "ws": "7.5.3",
+        "yargs": "16.2.0"
     }
 }

repo/Dockerfile

@@ -1,4 +1,4 @@
-FROM debian:bookworm-slim
+FROM debian:bookworm-slim@sha256:d5d3f9c23164ea16f31852f95bd5959aad1c5e854332fe00f7b3a20fcc9f635c
 ENV DEBIAN_FRONTEND=noninteractive
 RUN apt-get update && apt-get install -y unzip autoconf build-essential libssl-dev \
         pkg-config zlib1g-dev libargon2-dev libsodium-dev libcurl4-openssl-dev \