chore(deps): pin dependencies - autoclosed

.github/workflows/dependabot_automerge.yml

@@ -12,7 +12,7 @@ jobs:
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
       - name: Wait for check is finished
-        uses: lewagon/wait-on-check-action@v1.3.1
+        uses: lewagon/wait-on-check-action@e106e5c43e8ca1edea6383a39a01c5ca495fd812 # v1.3.1
         id: wait_for_checks
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.6.0
+        uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1.6.0
         with:
           github-token: "${{ secrets.PR_TOKEN }}"
       - name: Enable auto-merge for Dependabot PRs

.github/workflows/gobuild.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Fetch Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0 # Fetch all history so diffs can be performed
 

aws-sam-container/app/Dockerfile

@@ -1,14 +1,14 @@
-FROM golang:1.20 as build-env
+FROM golang:1.20@sha256:8f9af7094d0cb27cc783c697ac5ba25efdc4da35f8526db21f7aebb0b0b4f18a as build-env
 
 WORKDIR /go/src/app
 
 COPY . .
 
 RUN CGO_ENABLED=0 go build -ldflags "-s -w" -o /go/bin/app
 
-FROM gcr.io/distroless/static-debian11:latest
+FROM gcr.io/distroless/static-debian11:latest@sha256:6d31326376a7834b106f281b04f67b5d015c31732f594930f2ea81365f99d60c
 
-COPY --from=public.ecr.aws/awsguru/aws-lambda-adapter:0.7.0 /lambda-adapter /opt/extensions/lambda-adapter
+COPY --from=public.ecr.aws/awsguru/aws-lambda-adapter:0.7.0@sha256:c82920b82cd7fc20febf8bd608e907610bb32015edaf0fd6c065138d17125c12 /lambda-adapter /opt/extensions/lambda-adapter
 COPY --from=build-env /go/bin/app /
 
 ENV PORT=3000

cloud-run/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang as build-go
+FROM golang@sha256:a66eda637829ce891e9cf61ff1ee0edf544e1f6c5b0e666c7310dce231a66f28 as build-go
 WORKDIR /cloud-run-example
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /bin/cloud-run-example .
 
-FROM alpine:latest
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 RUN addgroup -S cloud-run-example && adduser -S cloud-run-example -G cloud-run-example
 USER cloud-run-example
 WORKDIR /home/cloud-run-example

docker-nginx-loadbalancer/Dockerfile

@@ -1,5 +1,5 @@
 # STEP 1 build executable binary
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 AS builder
 
 RUN adduser -D -g '' appuser
 RUN mkdir /app

fiber-colly-gorm/app/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.20
+FROM golang:1.20@sha256:8f9af7094d0cb27cc783c697ac5ba25efdc4da35f8526db21f7aebb0b0b4f18a
 
 RUN apt update && apt upgrade -y &&\
     apt install -y git

fiber-envoy-extauthz/app/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 AS builder
 WORKDIR /bin
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY main.go .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o app main.go
 
-FROM alpine:latest AS final
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 AS final
 WORKDIR /
 COPY --from=builder /bin/app ./
 EXPOSE 3000

fiber-envoy-extauthz/authz/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 AS builder
 WORKDIR /bin
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY main.go .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o app main.go
 
-FROM alpine:latest AS final
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 AS final
 WORKDIR /
 COPY --from=builder /bin/app ./
 EXPOSE 1337

gcloud-firebase/Dockerfile

@@ -14,7 +14,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -v -o app cmd/main.go
 
 # Use a Docker multi-stage build to create a lean production image.
 # https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
-FROM alpine
+FROM alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 RUN apk add --no-cache ca-certificates
 
 # Copy the binary to the production image from the builder stage.

gcloud/Dockerfile

@@ -14,7 +14,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -v -o app cmd/main.go
 
 # Use a Docker multi-stage build to create a lean production image.
 # https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
-FROM alpine
+FROM alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 RUN apk add --no-cache ca-certificates
 
 # Copy the binary to the production image from the builder stage.

k8s/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang AS builder
+FROM golang@sha256:a66eda637829ce891e9cf61ff1ee0edf544e1f6c5b0e666c7310dce231a66f28 AS builder
 WORKDIR /k8s-example
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /bin/k8s-example .
 
-FROM alpine:latest
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 RUN apk --no-cache add ca-certificates
 RUN addgroup -S k8s-example && adduser -S k8s-example -G k8s-example
 USER k8s-example

react-router/Dockerfile

@@ -34,7 +34,7 @@ COPY ./web .
 RUN yarn build
 
 # Last stage: discard everything except our executables.
-FROM alpine:latest AS prod
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0 AS prod
 
 # Set our next working directory.
 WORKDIR /build

todo-app-with-auth-gorm/Dockerfile

@@ -1,12 +1,12 @@
 
 #build stage
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 AS builder
 WORKDIR /go/src/app
 COPY . .
 RUN go get -d -v . && go build -ldflags="-s -w" main.go
 
 #final stage
-FROM alpine:latest
+FROM alpine:latest@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 LABEL maintainer=numtostr version=0.0.1
 COPY --from=builder /go/src/app/main /main
 EXPOSE 4000

url-shortener-api/api/Dockerfile

@@ -1,6 +1,6 @@
 # multistage docker build. This redices the size of the final docker image.
 # stage 1 to build the app
-FROM golang:alpine as builder
+FROM golang:alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 as builder
 
 RUN mkdir /build 
 
@@ -11,7 +11,7 @@ WORKDIR /build
 RUN go build -o main .
 
 # stage 2 deploys the app built in stage 1
-FROM alpine
+FROM alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 
 RUN adduser -S -D -H -h /app appuser
 

url-shortener-api/db/Dockerfile

@@ -1,3 +1,3 @@
-FROM redis:alpine
+FROM redis:alpine@sha256:de14eedfbd1fc871d0f5aa1773fd80743930e45354d035b6f3b551e7ffa44df8
 
 EXPOSE 6379