Pin dependencies

Author: renovate[bot]

.github/workflows/cloudfront.yml

@@ -37,7 +37,7 @@ jobs:
           echo "s3deploy=${S3DEPLOY_VERSION}" >> $GITHUB_OUTPUT
 
       - name: Setup Hugo
-        uses: peaceiris/actions-hugo@v3
+        uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3
         with:
           hugo-version: "${{ steps.versions.outputs.hugo }}"
           extended: true

.github/workflows/github_pages.yml

@@ -33,7 +33,7 @@ jobs:
 
       - name: Setup Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
 
       - name: Setup Hugo
         run: |
@@ -54,7 +54,7 @@ jobs:
           cp public/index.xml public/feed/index.xml
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
         with:
           path: ./public
 
@@ -68,4 +68,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/library/busybox:1.37.0
+FROM docker.io/library/busybox:1.37.0@sha256:d80cd694d3e9467884fcb94b8ca1e20437d8a501096cdf367a5a1918a34fc2fd
 RUN adduser -D static
 USER static
 WORKDIR /home/static