From f8fd722bdc82b76f7ee2735f100f40f6254e5ea8 Mon Sep 17 00:00:00 2001
From: "renovate-pagopa[bot]"
 <164534245+renovate-pagopa[bot]@users.noreply.github.com>
Date: Mon, 11 Nov 2024 05:56:20 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/call_opex_api.yml    |  2 +-
 .github/workflows/call_pr_opex_api.yml |  2 +-
 Dockerfile                             |  4 ++--
 docker-compose.yml                     | 18 +++++++++---------
 docker/images/tools/Dockerfile         |  2 +-
 5 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/call_opex_api.yml b/.github/workflows/call_opex_api.yml
index e191568c6..d9669e774 100644
--- a/.github/workflows/call_opex_api.yml
+++ b/.github/workflows/call_opex_api.yml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: pagopa/opex-dashboard-azure-action@v1.1.2
+      - uses: pagopa/opex-dashboard-azure-action@ece3bc2b133be74cabb50aec14cdb9b8051b886f # v1.1.2
         with:
           environment: prod
           api-name: ${{ env.API_NAME }}
diff --git a/.github/workflows/call_pr_opex_api.yml b/.github/workflows/call_pr_opex_api.yml
index e472494e1..8652c1270 100644
--- a/.github/workflows/call_pr_opex_api.yml
+++ b/.github/workflows/call_pr_opex_api.yml
@@ -72,7 +72,7 @@ jobs:
 
       - name: Post Plan on PR
         id: terraform_plan_comment
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         if: github.event_name == 'pull_request'
         with:
           script: |
diff --git a/Dockerfile b/Dockerfile
index 9c6df6979..08f9f9548 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18.13.0 as builder
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646 as builder
 
 WORKDIR /usr/src/app
 
@@ -7,7 +7,7 @@ COPY / /usr/src/app/
 RUN yarn install \
   && yarn predeploy
 
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 LABEL maintainer="https://pagopa.gov.it"
 
 # Install major CA certificates to cover
diff --git a/docker-compose.yml b/docker-compose.yml
index a0d050703..7928744f0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -32,7 +32,7 @@ services:
   #
   #
   redis-node-0:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -44,7 +44,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-1:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -56,7 +56,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-2:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -68,7 +68,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-3:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -80,7 +80,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-4:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -92,7 +92,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-5:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -104,7 +104,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-6:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -116,7 +116,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-cluster:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -139,7 +139,7 @@ services:
       - 'REDIS_CLUSTER_CREATOR=yes'
 
   storage:
-    image: mcr.microsoft.com/azure-storage/azurite
+    image: mcr.microsoft.com/azure-storage/azurite@sha256:2628ee10a72833cc344b9d194cd8b245543892b307d16cf26a2cf55a15b816af
     container_name: storage
     hostname: azurite
     restart: always
diff --git a/docker/images/tools/Dockerfile b/docker/images/tools/Dockerfile
index 8d5d426cd..5311d3054 100644
--- a/docker/images/tools/Dockerfile
+++ b/docker/images/tools/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18.13.0
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646
 LABEL maintainer="https://teamdigitale.governo.it"
 RUN apt-get update && apt-get install -y --no-install-recommends libunwind8 \
 && \