From dcce6eae74aaa177072a6c2f8bf7a41e3717b8a8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 18 Feb 2024 01:15:59 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/ci.yml | 12 ++++++------
 Containerfile            |  4 ++--
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 710e6a2..70bd955 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,13 +34,13 @@ jobs:
             platform: linux/arm64
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
 
       - name: Docker Metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5
         with:
           images: |
             ${{ env.IMAGE_NAME }}
@@ -53,7 +53,7 @@ jobs:
 
       - name: Build image
         id: build-image
-        uses: redhat-actions/buildah-build@v2
+        uses: redhat-actions/buildah-build@b4dc19b4ba891854660ab1f88a097d45aa158f76 # v2
         with:
           platforms: ${{ matrix.config.platform }}
           image: ${{ env.IMAGE_NAME }}
@@ -64,7 +64,7 @@ jobs:
 
       - name: Push image
         id: push-image
-        uses: redhat-actions/push-to-registry@v2
+        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
         with:
           image: ${{ steps.build-image.outputs.image }}
           tags: ${{ steps.build-image.outputs.tags }}
@@ -85,10 +85,10 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Podman login
-        uses: redhat-actions/podman-login@v1
+        uses: redhat-actions/podman-login@9184318aae1ee5034fbfbacc0388acf12669171f # v1
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
diff --git a/Containerfile b/Containerfile
index 733ee61..c4edafe 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/odrling/chimera:x86_64 AS builder
+FROM ghcr.io/odrling/chimera:x86_64@sha256:41b1908517a31791616a7a5d6b89351d227331816ad5bbd2755ace75f40d9cee AS builder
 ARG ARCH
 
 RUN apk add base-devel-static meson clang git lld
@@ -7,7 +7,7 @@ COPY . /dakara_check
 
 RUN cd /dakara_check && /dakara_check/ci/build.sh
 
-FROM ghcr.io/odrling/chimera
+FROM ghcr.io/odrling/chimera@sha256:26016bae5fc810a109cbadc449be1926594a5819223348dc9a41af20c30dc3c6
 
 COPY --from=builder /dakara_check/dest/ /
 ENTRYPOINT ["/usr/local/bin/dakara_check"]