Merge pull request #123 from mitodl/renovate/pin-dependencies

chore(deps): pin dependencies

.github/workflows/docker.yaml

@@ -9,20 +9,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
     - name: set up Docker Buildx
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
 
     - name: login to DockerHub
-      uses: docker/login-action@v3
+      uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3
       with:
         username: ${{ secrets.DOCKERHUB_USERNAME }}
         password: ${{ secrets.DOCKERHUB_TOKEN }}
 
     - name: build and push
       id: docker_build
-      uses: docker/build-push-action@v4
+      uses: docker/build-push-action@0a97817b6ade9f46837855d676c4cca3a2471fc9 # v4
       with:
         push: true
         build-args:

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11-alpine
+FROM python:3.11-alpine@sha256:0b5ed25d3cc27cd35c7b0352bac8ef2ebc8dd3da72a0c03caaf4eb15d9ec827a
 ENV PYTHONUNBUFFERED=1
 WORKDIR /opt/resource
 CMD ["/bin/sh"]

Dockerfile.mitol_build

@@ -1,6 +1,6 @@
-FROM mitodl/ol-infrastructure as infra
+FROM mitodl/ol-infrastructure@sha256:ca95c11572d95381378822c11f4f176aa5e87d35636b8c88f4e35ab8bd43cf3c as infra
 
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:dad770592ab3582ab2dabcf0e18a863df9d86bd9d23efcfa614110ce49ac20e4
 ENV PYTHONUNBUFFERED=1
 ARG PACKER_VERSION=1.9.1
 WORKDIR /opt/resource