Merge pull request 'Pin dependencies' (#2) from renovate/pin-dependencies into master

Reviewed-on: #2

.forgejo/workflows/build.yml

@@ -8,10 +8,10 @@ on:
 jobs:
   Build and Push Images:
     runs-on: docker
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:89367f3c5437699c6b43fa941041725bcc77682a46f2bbe6557541e384d9cedb
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           token: ${{ secrets.COASTALCOMMITSTOKEN }}
       - name: Login to CoastalCommits

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12.4-alpine
+FROM python:3.12.4-alpine@sha256:63094abdaf49e046da9f6529ecd6ce4d853d9bfbf00a25c52bbbb68b3223b490
 
 WORKDIR /app
 

docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   web:
-    image: www.coastalcommits.com/galacticfactory/downloader:latest
+    image: www.coastalcommits.com/galacticfactory/downloader:latest@sha256:2673c78e77f01573897d9e2dbc8aa4af7a28f09895c69b9afb78ac7801080574
     restart: always
     environment:
       - FORGEJO_BASE_URL=https://www.coastalcommits.com