chore(supply-chain): pin every OFFICIAL_IMAGE to a @sha256: digest #231

Job	Run time
Resolve image matrix	6s
Build Images (scanner-bandit, docker/Dockerfile.bandit, .)	22s
Build Images (scanner-supply-chain, docker/Dockerfile.supply-chain, .)	21s
Build Images (cli, docker/Dockerfile.cli, .)	55s
Build Images (scanner-opengrep, docker/Dockerfile.opengrep, .)	25s
Scan scanner-bandit	1m 25s
Test Argus CLI	1m 15s
Scan scanner-opengrep	1m 55s
Scan cli	1m 38s
Scan scanner-supply-chain	1m 23s
Container Scan Summary	9s
	9m 54s

Provide feedback