chore(deps): pin dependencies

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/devcontainers/typescript-node:20-bullseye
+FROM mcr.microsoft.com/devcontainers/typescript-node:20-bullseye@sha256:5c9af5a61dcd113103a93f170710e5bca58881025955a9e7f4e34fb67bc5f568
 
 # Update the underlying (Debian) OS, to make sure we have the latest security patches and libraries like 'GLIBC'
 RUN sudo apt-get update && sudo apt-get -y upgrade

.devcontainer/devcontainer.json

@@ -8,8 +8,8 @@
     "dockerfile": "Dockerfile"
   },
   "features": {
-    "ghcr.io/devcontainers/features/rust:1": {},
-    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
+    "ghcr.io/devcontainers/features/rust:1@sha256:aba6f47303b197976902bf544c786b5efecc03c238ff593583e5e74dfa9c7ccb": {},
+    "ghcr.io/devcontainers/features/docker-in-docker:2@sha256:503f23cd692325b3cbb8c20a0ecfabb3444b0c786b363e0c82572bd7d71dc099": {}
   },
   // Use 'forwardPorts' to make a list of ports inside the container available locally.
   // 4211 = nx graph port

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           fetch-depth: 0
 
@@ -26,12 +26,12 @@ jobs:
         with:
           version: 8
       # Cache node_modules
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
           cache: 'pnpm'
       - run: pnpm install --frozen-lockfile
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@40f1175ceec169e68c9857c27aa7c5063692aa9a # v4
 
       - run: git branch --track main origin/main
         if: ${{ github.event_name == 'pull_request' }}

.github/workflows/codeql-analysis.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.github/workflows/dte-ci.yml

@@ -14,7 +14,7 @@ permissions:
 jobs:
   main:
     name: Nx Cloud - Main Job
-    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-main.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       main-branch-name: main
       number-of-agents: 3
@@ -29,6 +29,6 @@ jobs:
 
   agents:
     name: Nx Cloud - Agents
-    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@v0.14.0
+    uses: nrwl/ci/.github/workflows/nx-cloud-agents.yml@81f119483401ffde8275edf4c089b42e24b92cf4 # v0.14.0
     with:
       number-of-agents: 3

.gitlab-ci.yml

@@ -6,7 +6,7 @@ stages:
   - build
 
 default:
-  image: node:20.12
+  image: node:20.12@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
 
 variables:
   CI: 'true'

package.json

@@ -68,10 +68,10 @@
     "prettier": "2.8.8",
     "ts-jest": "29.1.1",
     "ts-node": "10.9.2",
-    "tsx": "^4.7.2",
+    "tsx": "4.7.2",
     "typescript": "5.4.3",
     "validate-branch-name": "1.3.0",
-    "verdaccio": "^5.27.0"
+    "verdaccio": "5.30.3"
   },
   "packageManager": "pnpm@8.15.8+sha512.d1a029e1a447ad90bc96cd58b0fad486d2993d531856396f7babf2d83eb1823bb83c5a3d0fc18f675b2d10321d49eb161fece36fe8134aa5823ecd215feed392",
   "nx": {

packages/nx-container/tests/Dockerfile

@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:77726ef6b57ddf65bb551896826ec38bc3e53f75cdde31354fbffb4f25238ebd
 
 RUN echo "Hello world!"