From 9cf84a840a8c93799b90e52d298433762f90deed Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 20 Feb 2025 09:13:52 +0000
Subject: [PATCH] Pin dependencies

---
 config/docker-compose-common-services.yaml | 4 ++--
 repo-converter/build/Dockerfile            | 4 ++--
 repo-converter/docker-compose.yaml         | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/config/docker-compose-common-services.yaml b/config/docker-compose-common-services.yaml
index 0945524..c9a3486 100644
--- a/config/docker-compose-common-services.yaml
+++ b/config/docker-compose-common-services.yaml
@@ -2,7 +2,7 @@ services:
 
   cloud-agent:
     container_name: cloud-agent
-    image: index.docker.io/sourcegraph/src-tunnel-agent:latest
+    image: index.docker.io/sourcegraph/src-tunnel-agent:latest@sha256:442086460d68fb6182f26cd29346ded5b236ccaba18e32d47cdcf425e641034c
     volumes:
       - ../config/cloud-agent-service-account-key.json:/sourcegraph/cloud-agent-service-account-key.json:ro
       - ../config/cloud-agent-config.yaml:/sourcegraph/cloud-agent-config.yaml:ro
@@ -14,7 +14,7 @@ services:
   src-serve-git:
     # Uses a valid hostname as container_name, to trick the cloud agent and code host config into finding this container on the Docker network
     container_name: src-serve-git-ubuntu.local
-    image:  index.docker.io/sourcegraph/src-cli:latest
+    image:  index.docker.io/sourcegraph/src-cli:latest@sha256:44276c59f31e236ac55b0d005ad0725f5abd73f9cb4f9e2700fad0fff2252ef9
     volumes:
       - ../../../sg/src-serve-root/:/sourcegraph/src-serve-root:ro
     command: "serve-git -addr :443 /sourcegraph/src-serve-root"
diff --git a/repo-converter/build/Dockerfile b/repo-converter/build/Dockerfile
index 1ea2d53..93b0bc3 100644
--- a/repo-converter/build/Dockerfile
+++ b/repo-converter/build/Dockerfile
@@ -1,11 +1,11 @@
-# syntax=docker/dockerfile:1
+# syntax=docker/dockerfile:1@sha256:93bfd3b68c109427185cd78b4779fc82b484b0b7618e36d0f104d4d801e66d25
 # Using version:1 means always getting the latest version of dockerfile syntax within major version 1
 # https://docs.docker.com/build/dockerfile/frontend/#stable-channel
 # version:1 is still the most popular version
 # https://sourcegraph.com/search?q=context:global+%23+syntax%3Ddocker/dockerfile:(.*)&patternType=regexp&sm=0&expanded=&groupBy=group
 
 # Using Ubuntu LTS
-FROM ubuntu:22.04 as base
+FROM ubuntu:22.04@sha256:ed1544e454989078f5dec1bfdabd8c5cc9c48e0705d07b678ab6ae3fb61952d2 as base
 
 # Avoid stuck build due to user prompt
 ARG DEBIAN_FRONTEND=noninteractive
diff --git a/repo-converter/docker-compose.yaml b/repo-converter/docker-compose.yaml
index f2cc98f..30002fd 100644
--- a/repo-converter/docker-compose.yaml
+++ b/repo-converter/docker-compose.yaml
@@ -7,7 +7,7 @@ services:
 
   repo-converter:
     container_name: repo-converter
-    image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest
+    image: ghcr.io/sourcegraph/implementation-bridge-repo-converter:latest@sha256:5acfe53120ac4b34a7043c615998337e9e5b3cb94e89eca4faf45ed754b4c488
     volumes:
       - ../config/repos-to-convert.yaml:/sourcegraph/repos-to-convert.yaml:ro
       - ../config/toprc:/root/.config/procps/toprc