chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/bash.yml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:bash
         workdir: plugins/bash

.github/workflows/go.yml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: install go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
       with:
         go-version: '>=1.19.0'
 
@@ -34,7 +34,7 @@ jobs:
           plugins/go/main.go
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:go
         workdir: plugins/go

.github/workflows/node.js.yml

@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: install node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
       with:
         node-version: 16
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:node
         workdir: plugins/node.js

.github/workflows/python.yml

@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: setup python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
       with:
-        python-version: '3.10'
+        python-version: '3.13'
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:python
         workdir: plugins/python

.github/workflows/ruby.yml

@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: setup ruby
       uses: ruby/setup-ruby@v1
       with:
         ruby-version: '3.0'
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:ruby
         workdir: plugins/ruby

plugins/bash/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 
 RUN apk add --update --no-cache bash ca-certificates curl
 

plugins/go/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:alpine
+FROM golang:alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386
 
 RUN apk add --update --no-cache ca-certificates
 

plugins/node.js/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:alpine
+FROM node:alpine@sha256:6eae672406a2bc8ed93eab6f9f76a02eb247e06ba82b2f5032c0a4ae07e825ba
 
 RUN apk add --update --no-cache ca-certificates
 

plugins/python/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:alpine
+FROM python:alpine@sha256:323a717dc4a010fee21e3f1aac738ee10bb485de4e7593ce242b36ee48d6b352
 
 RUN apk add --update --no-cache ca-certificates
 

plugins/ruby/Dockerfile

@@ -1,4 +1,4 @@
-FROM ruby:alpine
+FROM ruby:alpine@sha256:cb6a5cb7303314946b75fa64c96d8116f838b8495ffa161610bd6aaaf9a70121
 
 RUN apk add --update --no-cache ca-certificates