ci: use shasum for action and images

[eltouma]

Summary by CodeRabbit

• Chores
  • Updated CI workflows to pin referenced actions to specific, immutable releases for more reliable builds.
  • Updated container build configuration to pin base images by content digest to ensure reproducible, deterministic images.

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Free

Run ID: a3b14d2d-c5d4-4eae-b256-25069159f649

📥 Commits

Reviewing files that changed from the base of the PR and between d7dee87 and 3b500e9.

📒 Files selected for processing (1)

• .github/workflows/push_to_registry.yml

✅ Files skipped from review due to trivial changes (1)

• .github/workflows/push_to_registry.yml

---

📝 Walkthrough

Walkthrough

CI/CD workflows and Docker build stages were updated to pin upstream references: GitHub Actions uses: entries now point to specific commit SHAs, and Dockerfile base images are locked to image digests. No functional workflow logic or build arguments were changed.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflows .github/workflows/push_to_registry.yml, .github/workflows/release.yml	Replaced action tags with pinned commit SHAs for actions/checkout, docker/setup-buildx-action, docker/login-action, and docker/build-push-action. No changes to step inputs, job logic, or build/push configuration.
Docker Build Configuration Dockerfile	Base images for build stages updated from tag-only references to digest-pinned references (e.g., node:23-alpine@sha256:..., golang:1.24-alpine@sha256:...). Build steps and artifacts unchanged.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hopped through lines of YAML bright,

Pinned shas and digests snug and tight,
No drifting tags to make me fret,
Repro builds — a perfect set,
Thump-thump, I celebrate the light!

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Pro by visiting https://app.coderabbit.ai/login.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}