Merge pull request #10 from dskiff/renovate/pin-dependencies

Pin debian Docker tag to 155280b
dskiff · Apr 25, 2024 · 4f1c2d9 · 4f1c2d9
2 parents b84e62f + 77b48e5
commit 4f1c2d9
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Publish (latest)
         run: tko "./dist/tko_linux_amd64_v1"
         env:
-          TKO_BASE_IMAGE: debian:bookworm-slim
+          TKO_BASE_IMAGE: debian:bookworm-slim@sha256:155280b00ee0133250f7159b567a07d7cd03b1645714c3a7458b2287b0ca83cb
           TKO_DEST_PATH: "/usr/local/bin"
           TKO_TARGET_REPO: "ghcr.io/dskiff/tko:latest" 
           GITHUB_TOKEN: ${{ github.token }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Publish (version)
         run: tko "./dist/tko_linux_amd64_v1"
         env:
-          TKO_BASE_IMAGE: debian:bookworm-slim
+          TKO_BASE_IMAGE: debian:bookworm-slim@sha256:155280b00ee0133250f7159b567a07d7cd03b1645714c3a7458b2287b0ca83cb
           TKO_DEST_PATH: "/usr/local/bin"
           TKO_TARGET_REPO: "ghcr.io/dskiff/tko:${{ github.ref_name }}" 
           GITHUB_TOKEN: ${{ github.token }}