Pin dependencies

Author: renovate-pagopa[bot]

.github/workflows/beta-docker-branch.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         id: checkout
         # from https://github.com/actions/checkout/commits/main
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         id: checkout
         # from https://github.com/actions/checkout/commits/main
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/test.yml

@@ -17,12 +17,12 @@ jobs:
       - name: Checkout
         id: checkout
         # from https://github.com/actions/checkout/commits/main
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           persist-credentials: false
           fetch-depth: 0
       - name: Use Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@dbe1369d7be17e7823f8c1ee1ae8bec5779239dd # v3
         with:
           node-version: '18.x'
       - run: npm ci

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.19.0-buster
+FROM node:18.19.0-buster@sha256:7a7c4663f8cf434a66a10ebb33e749663454aa284e3b9ccb79c454f6925c752d
 
 RUN mkdir -p /home/node/app/node_modules && chown -R node:node /home/node/app
 WORKDIR /home/node/app