From bd49217a00878c06b18c87e879cc0f04e5ac3f1c Mon Sep 17 00:00:00 2001
From: Renovate <renovate@coastalcommits.com>
Date: Sat, 28 Dec 2024 04:20:58 +0000
Subject: [PATCH] Pin dependencies

---
 .forgejo/workflows/build.yml | 4 ++--
 Dockerfile                   | 2 +-
 docker-compose.yml           | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 9867807..dedbbdf 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -8,10 +8,10 @@ on:
 jobs:
   Build and Push Images:
     runs-on: docker
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:89367f3c5437699c6b43fa941041725bcc77682a46f2bbe6557541e384d9cedb
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           token: ${{ secrets.COASTALCOMMITSTOKEN }}
       - name: Login to CoastalCommits
diff --git a/Dockerfile b/Dockerfile
index 62bcc8b..4881266 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12.4-alpine
+FROM python:3.12.4-alpine@sha256:63094abdaf49e046da9f6529ecd6ce4d853d9bfbf00a25c52bbbb68b3223b490
 
 WORKDIR /app
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 2753413..03ffa68 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   web:
-    image: www.coastalcommits.com/galacticfactory/downloader:latest
+    image: www.coastalcommits.com/galacticfactory/downloader:latest@sha256:2673c78e77f01573897d9e2dbc8aa4af7a28f09895c69b9afb78ac7801080574
     restart: always
     environment:
       - FORGEJO_BASE_URL=https://www.coastalcommits.com