chore(deps): pin dependencies (#70)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/build-and-deploy.yml

@@ -23,12 +23,12 @@ jobs:
       run: docker build . -t ghcr.io/${{ github.repository }}:${{ github.sha }} -t ghcr.io/${{ github.repository }}:latest
 
     - name: Scan container for issues
-      uses: Azure/[email protected]
+      uses: Azure/container-scan@f9af925b897d8af5f7e0026b8bca9346261abc93 # v0.1
       with:
         image-name: ghcr.io/${{ github.repository }}:${{ github.sha }}
 
     - name: Login to GitHub Container Registry
-      uses: docker/[email protected]
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
       with:
         registry: ghcr.io
         username: ${{ github.repository_owner }}

.github/workflows/build.yml

@@ -14,6 +14,6 @@ jobs:
       run: docker build . -t ghcr.io/${{ github.repository }}:${{ github.sha }}
 
     - name: Scan container for issues
-      uses: Azure/[email protected]
+      uses: Azure/container-scan@f9af925b897d8af5f7e0026b8bca9346261abc93 # v0.1
       with:
         image-name: ghcr.io/${{ github.repository }}:${{ github.sha }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.19
+FROM alpine:3.19@sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48
 
 # Non-root user for security purposes.
 #