From 0b06925aeee318f4ab1a2eedca4527625bda014c Mon Sep 17 00:00:00 2001
From: "renovate-sh-app[bot]"
 <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Date: Tue, 16 Dec 2025 06:47:11 +0000
Subject: [PATCH] chore(deps): pin dependencies

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
---
 .github/workflows/validate_pr.yml | 12 ++++++------
 cmd/benchtool/Dockerfile          |  4 ++--
 cmd/benchtool/GR.Dockerfile       |  2 +-
 cmd/cortextool/Dockerfile         |  4 ++--
 cmd/cortextool/GR.Dockerfile      |  2 +-
 cmd/e2ealerting/Dockerfile        |  4 ++--
 cmd/logtool/Dockerfile            |  4 ++--
 7 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/validate_pr.yml b/.github/workflows/validate_pr.yml
index 980218c01..ea8399fe8 100644
--- a/.github/workflows/validate_pr.yml
+++ b/.github/workflows/validate_pr.yml
@@ -14,10 +14,10 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
           go-version: '1.21'
           cache: false
@@ -29,11 +29,11 @@ jobs:
     name: Unit-Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
       - name: Set up Go 1.21
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
           go-version: 1.21
       - name: Unit Tests
@@ -42,11 +42,11 @@ jobs:
     name: Build Binaries
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
       - name: Set up Go 1.21
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
           go-version: 1.21
       - name: Build All
diff --git a/cmd/benchtool/Dockerfile b/cmd/benchtool/Dockerfile
index 777d458cf..f9f19d4b3 100644
--- a/cmd/benchtool/Dockerfile
+++ b/cmd/benchtool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make benchtool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/benchtool/benchtool /usr/bin/benchtool
 EXPOSE     80
diff --git a/cmd/benchtool/GR.Dockerfile b/cmd/benchtool/GR.Dockerfile
index 6c0a77141..4a6b96199 100644
--- a/cmd/benchtool/GR.Dockerfile
+++ b/cmd/benchtool/GR.Dockerfile
@@ -1,4 +1,4 @@
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       benchtool /usr/bin/benchtool
 EXPOSE     80
diff --git a/cmd/cortextool/Dockerfile b/cmd/cortextool/Dockerfile
index 6226915dc..d25822c48 100644
--- a/cmd/cortextool/Dockerfile
+++ b/cmd/cortextool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make cortextool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates tzdata
 COPY       --from=build /build_dir/cmd/cortextool/cortextool /usr/bin/cortextool
 EXPOSE     80
diff --git a/cmd/cortextool/GR.Dockerfile b/cmd/cortextool/GR.Dockerfile
index 78368dea2..69e8924a6 100644
--- a/cmd/cortextool/GR.Dockerfile
+++ b/cmd/cortextool/GR.Dockerfile
@@ -1,4 +1,4 @@
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       cortextool /usr/bin/cortextool
 EXPOSE     80
diff --git a/cmd/e2ealerting/Dockerfile b/cmd/e2ealerting/Dockerfile
index 47ed4cf5d..3effd6749 100644
--- a/cmd/e2ealerting/Dockerfile
+++ b/cmd/e2ealerting/Dockerfile
@@ -1,10 +1,10 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 RUN make clean && make e2ealerting
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/e2ealerting/e2ealerting /usr/bin/e2ealerting
 EXPOSE     80
diff --git a/cmd/logtool/Dockerfile b/cmd/logtool/Dockerfile
index 13192acb9..71c61f439 100644
--- a/cmd/logtool/Dockerfile
+++ b/cmd/logtool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make logtool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/logtool/logtool /usr/bin/logtool
 EXPOSE     80