diff --git a/.github/workflows/docker-build-branch.yml b/.github/workflows/docker-build-branch.yml index f7b9f85..21f5dba 100644 --- a/.github/workflows/docker-build-branch.yml +++ b/.github/workflows/docker-build-branch.yml @@ -27,13 +27,13 @@ jobs: variant: [prod, dev] steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 - name: Log in to Container Registry - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -64,7 +64,7 @@ jobs: echo "branch=${BRANCH_NAME}" >> $GITHUB_OUTPUT - name: Build and push Docker image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 with: context: . file: ./${{ steps.meta.outputs.dockerfile }} diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 6aad111..c2d7931 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -26,13 +26,13 @@ jobs: variant: [prod, dev] steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 - name: Log in to Container Registry - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -69,7 +69,7 @@ jobs: echo "dockerfile=${DOCKERFILE}" >> $GITHUB_OUTPUT - name: Build and push Docker image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 if: steps.meta.outputs.tags != '' with: context: . @@ -89,7 +89,7 @@ jobs: packages: write steps: - name: Login to GHCR - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} diff --git a/.github/workflows/docker-cleanup-deleted-branches.yml b/.github/workflows/docker-cleanup-deleted-branches.yml index 40c3c63..6b9fe3b 100644 --- a/.github/workflows/docker-cleanup-deleted-branches.yml +++ b/.github/workflows/docker-cleanup-deleted-branches.yml @@ -15,7 +15,7 @@ jobs: packages: write steps: - name: Login to GHCR - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 14a3a22..32df173 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 with: python-version: ${{ matrix.python-version }} diff --git a/Dockerfile b/Dockerfile index 4b35c51..f0ae7b3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # Production Dockerfile for fakevine using multi-stage build # Stage 1: Builder - Install dependencies using uv -FROM python:3.14-alpine@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4ebdabbc523b9a1614 AS builder +FROM python:3.14-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc AS builder WORKDIR /app @@ -16,7 +16,7 @@ COPY . . RUN uv sync --frozen --no-dev # Stage 2: Runtime - Minimal image with only the virtual environment -FROM python:3.14-alpine@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4ebdabbc523b9a1614 +FROM python:3.14-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc WORKDIR /app diff --git a/Dockerfile.caddy b/Dockerfile.caddy index c22a114..ba62c5e 100644 --- a/Dockerfile.caddy +++ b/Dockerfile.caddy @@ -1,5 +1,5 @@ # Build Caddy with cache-handler and rate-limit plugins -FROM caddy:2.11.3-builder-alpine@sha256:52575959b1eeee9900869325a953d71e4c521ab9102dd5cce07d429ea8246b85 AS builder +FROM caddy:2.11.3-builder-alpine@sha256:3eae6b351ecdb05da6d16e341261a457692d344a435764c5ece7a60cf03a23f3 AS builder # Install the cache-handler and rate-limit plugins RUN --mount=type=cache,target=/go/pkg/mod \ diff --git a/Dockerfile.dev b/Dockerfile.dev index 1e3f9b8..111ce1c 100644 --- a/Dockerfile.dev +++ b/Dockerfile.dev @@ -1,6 +1,6 @@ # Development Dockerfile for fakevine using multi-stage build # Stage 1: Builder - Install dependencies using uv -FROM python:3.14-alpine@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4ebdabbc523b9a1614 AS builder +FROM python:3.14-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc AS builder WORKDIR /app @@ -16,7 +16,7 @@ COPY . . RUN uv sync --frozen # Stage 2: Runtime - Minimal image with only the virtual environment -FROM python:3.14-alpine@sha256:5a824eb82cc75361f98611f3cfc5091ea33f10a6ccea4d4ebdabbc523b9a1614 +FROM python:3.14-alpine@sha256:05b2b8b732ecd268fee8727a369f936f022d1321b59befd13c30ede22769dcdc WORKDIR /app diff --git a/docker-compose.caddy.yml b/docker-compose.caddy.yml index 45de098..02ce9a6 100644 --- a/docker-compose.caddy.yml +++ b/docker-compose.caddy.yml @@ -50,7 +50,7 @@ services: - "8463" redis: - image: redis:8-alpine@sha256:09160599abd229764c0fb44cb6be640294e1d360a54b19985ab4843dcf2d90f1 + image: redis:8-alpine@sha256:978f0e01593e65eed801f2402944efcd936d43b5027e4908a7897baf88ed6241 container_name: fakevine-redis ports: - "6379:6379"