chore(deps): pin dependencies

gofiber · May 15, 2024 · 9fbe27c · 9fbe27c
1 parent aa602c6
commit 9fbe27c
Show file tree

Hide file tree

Showing 15 changed files with 24 additions and 24 deletions.
diff --git a/.github/workflows/dependabot_automerge.yml b/.github/workflows/dependabot_automerge.yml
@@ -12,7 +12,7 @@ jobs:
  if: ${{ github.actor == 'dependabot[bot]' }}
  steps:
  - name: Wait for check is finished
- uses: lewagon/[email protected]
+ uses: lewagon/wait-on-check-action@e106e5c43e8ca1edea6383a39a01c5ca495fd812 # v1.3.1
  id: wait_for_checks
  with:
  ref: ${{ github.event.pull_request.head.sha || github.sha }}
@@ -28,7 +28,7 @@ jobs:
  steps:
  - name: Dependabot metadata
  id: metadata
- uses: dependabot/[email protected]
+ uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1.6.0
  with:
  github-token: "${{ secrets.PR_TOKEN }}"
  - name: Enable auto-merge for Dependabot PRs

diff --git a/.github/workflows/gobuild.yml b/.github/workflows/gobuild.yml
@@ -23,7 +23,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Fetch Repository
- uses: actions/checkout@v4
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
  with:
  fetch-depth: 0 # Fetch all history so diffs can be performed
 

diff --git a/aws-sam-container/app/Dockerfile b/aws-sam-container/app/Dockerfile
@@ -1,14 +1,14 @@
-FROM golang:1.20 as build-env
+FROM golang:1.20@sha256:8f9af7094d0cb27cc783c697ac5ba25efdc4da35f8526db21f7aebb0b0b4f18a as build-env
 
 WORKDIR /go/src/app
 
 COPY . .
 
 RUN CGO_ENABLED=0 go build -ldflags "-s -w" -o /go/bin/app
 
-FROM gcr.io/distroless/static-debian11:latest
+FROM gcr.io/distroless/static-debian11:latest@sha256:6d31326376a7834b106f281b04f67b5d015c31732f594930f2ea81365f99d60c
 
-COPY --from=public.ecr.aws/awsguru/aws-lambda-adapter:0.7.0 /lambda-adapter /opt/extensions/lambda-adapter
+COPY --from=public.ecr.aws/awsguru/aws-lambda-adapter:0.7.0@sha256:c82920b82cd7fc20febf8bd608e907610bb32015edaf0fd6c065138d17125c12 /lambda-adapter /opt/extensions/lambda-adapter
 COPY --from=build-env /go/bin/app /
 
 ENV PORT=3000

diff --git a/cloud-run/Dockerfile b/cloud-run/Dockerfile
@@ -1,12 +1,12 @@
-FROM golang as build-go
+FROM golang@sha256:ab48cd7b8e2cffb6fa1199de232f61c76d3c33dc158be8a998c5407a8e5eb583 as build-go
 WORKDIR /cloud-run-example
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /bin/cloud-run-example .
 
-FROM alpine:latest
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 RUN addgroup -S cloud-run-example && adduser -S cloud-run-example -G cloud-run-example
 USER cloud-run-example
 WORKDIR /home/cloud-run-example

diff --git a/docker-nginx-loadbalancer/Dockerfile b/docker-nginx-loadbalancer/Dockerfile
@@ -1,5 +1,5 @@
 # STEP 1 build executable binary
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 AS builder
 
 RUN adduser -D -g '' appuser
 RUN mkdir /app

diff --git a/fiber-colly-gorm/app/Dockerfile b/fiber-colly-gorm/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.20
+FROM golang:1.20@sha256:8f9af7094d0cb27cc783c697ac5ba25efdc4da35f8526db21f7aebb0b0b4f18a
 
 RUN apt update && apt upgrade -y &&\
  apt install -y git

diff --git a/fiber-envoy-extauthz/app/Dockerfile b/fiber-envoy-extauthz/app/Dockerfile
@@ -1,12 +1,12 @@
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 AS builder
 WORKDIR /bin
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY main.go .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o app main.go
 
-FROM alpine:latest AS final
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS final
 WORKDIR /
 COPY --from=builder /bin/app ./
 EXPOSE 3000

diff --git a/fiber-envoy-extauthz/authz/Dockerfile b/fiber-envoy-extauthz/authz/Dockerfile
@@ -1,12 +1,12 @@
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 AS builder
 WORKDIR /bin
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY main.go .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o app main.go
 
-FROM alpine:latest AS final
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS final
 WORKDIR /
 COPY --from=builder /bin/app ./
 EXPOSE 1337

diff --git a/gcloud-firebase/Dockerfile b/gcloud-firebase/Dockerfile
@@ -14,7 +14,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -v -o app cmd/main.go
 
 # Use a Docker multi-stage build to create a lean production image.
 # https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
-FROM alpine
+FROM alpine@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 RUN apk add --no-cache ca-certificates
 
 # Copy the binary to the production image from the builder stage.

diff --git a/gcloud/Dockerfile b/gcloud/Dockerfile
@@ -14,7 +14,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -v -o app cmd/main.go
 
 # Use a Docker multi-stage build to create a lean production image.
 # https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
-FROM alpine
+FROM alpine@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 RUN apk add --no-cache ca-certificates
 
 # Copy the binary to the production image from the builder stage.

diff --git a/k8s/Dockerfile b/k8s/Dockerfile
@@ -1,12 +1,12 @@
-FROM golang AS builder
+FROM golang@sha256:ab48cd7b8e2cffb6fa1199de232f61c76d3c33dc158be8a998c5407a8e5eb583 AS builder
 WORKDIR /k8s-example
 COPY go.mod .
 COPY go.sum .
 RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /bin/k8s-example .
 
-FROM alpine:latest
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 RUN apk --no-cache add ca-certificates
 RUN addgroup -S k8s-example && adduser -S k8s-example -G k8s-example
 USER k8s-example

diff --git a/react-router/Dockerfile b/react-router/Dockerfile
@@ -34,7 +34,7 @@ COPY ./web .
 RUN yarn build
 
 # Last stage: discard everything except our executables.
-FROM alpine:latest AS prod
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b AS prod
 
 # Set our next working directory.
 WORKDIR /build

diff --git a/todo-app-with-auth-gorm/Dockerfile b/todo-app-with-auth-gorm/Dockerfile
@@ -1,12 +1,12 @@
 
 #build stage
-FROM golang:alpine AS builder
+FROM golang:alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 AS builder
 WORKDIR /go/src/app
 COPY . .
 RUN go get -d -v . && go build -ldflags="-s -w" main.go
 
 #final stage
-FROM alpine:latest
+FROM alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 LABEL maintainer=numtostr version=0.0.1
 COPY --from=builder /go/src/app/main /main
 EXPOSE 4000

diff --git a/url-shortener-api/api/Dockerfile b/url-shortener-api/api/Dockerfile
@@ -1,6 +1,6 @@
 # multistage docker build. This redices the size of the final docker image.
 # stage 1 to build the app
-FROM golang:alpine as builder
+FROM golang:alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 as builder
 
 RUN mkdir /build 
 
@@ -11,7 +11,7 @@ WORKDIR /build
 RUN go build -o main .
 
 # stage 2 deploys the app built in stage 1
-FROM alpine
+FROM alpine@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
 
 RUN adduser -S -D -H -h /app appuser
 

diff --git a/url-shortener-api/db/Dockerfile b/url-shortener-api/db/Dockerfile
@@ -1,3 +1,3 @@
-FROM redis:alpine
+FROM redis:alpine@sha256:a40e29800d387e3cf9431902e1e7a362e4d819233d68ae39380532c3310091ac
 
 EXPOSE 6379