Pin dependencies

.github/workflows/call_opex_api.yml

@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: pagopa/[email protected]
+      - uses: pagopa/opex-dashboard-azure-action@ece3bc2b133be74cabb50aec14cdb9b8051b886f # v1.1.2
         with:
           environment: prod
           api-name: ${{ env.API_NAME }}

.github/workflows/call_pr_opex_api.yml

@@ -72,7 +72,7 @@ jobs:
 
       - name: Post Plan on PR
         id: terraform_plan_comment
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         if: github.event_name == 'pull_request'
         with:
           script: |

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.13.0 as builder
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646 as builder
 
 WORKDIR /usr/src/app
 
@@ -7,7 +7,7 @@ COPY / /usr/src/app/
 RUN yarn install \
   && yarn predeploy
 
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 LABEL maintainer="https://pagopa.gov.it"
 
 # Install major CA certificates to cover

docker-compose.yml

@@ -32,7 +32,7 @@ services:
   #
   #
   redis-node-0:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -44,7 +44,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-1:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -56,7 +56,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-2:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -68,7 +68,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-3:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -80,7 +80,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-4:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -92,7 +92,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-5:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -104,7 +104,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-node-6:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -116,7 +116,7 @@ services:
       - 'REDIS_NODES=redis-cluster redis-node-0 redis-node-1 redis-node-2 redis-node-3 redis-node-4 redis-node-5 redis-node-6'
 
   redis-cluster:
-    image: docker.io/bitnami/redis-cluster:6.2
+    image: docker.io/bitnami/redis-cluster:6.2@sha256:19c064bd584ebbd77f2f42f0115627d895c6fa5ad366f3d6ea0aa557ab4c445d
     networks:
       - io-be
     ports:
@@ -139,7 +139,7 @@ services:
       - 'REDIS_CLUSTER_CREATOR=yes'
 
   storage:
-    image: mcr.microsoft.com/azure-storage/azurite
+    image: mcr.microsoft.com/azure-storage/azurite@sha256:2628ee10a72833cc344b9d194cd8b245543892b307d16cf26a2cf55a15b816af
     container_name: storage
     hostname: azurite
     restart: always

docker/images/tools/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.13.0
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646
 LABEL maintainer="https://teamdigitale.governo.it"
 RUN apt-get update && apt-get install -y --no-install-recommends libunwind8 \
 && \