From 37e388837805aa1b0ae9e81969c910fe1e805366 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 8 Aug 2023 00:50:19 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/test.yml | 2 +-
 Dockerfile                 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 55667f4..00fc66c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.20
+      image: golang:1.20@sha256:bc5f0b5e43282627279fe5262ae275fecb3d2eae3b33977a7fd200c7a760d6f1
     steps:
     - name: clone
       uses: actions/checkout@v3
diff --git a/Dockerfile b/Dockerfile
index 1ee4c8a..2c7263a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@
 ##    docker build --no-cache --target certs -t vela-downstream:certs .    ##
 #############################################################################
 
-FROM alpine as certs
+FROM alpine@sha256:7144f7bab3d4c2648d7e59409f15ec52a18006a128c733fcff20d3a4a54ba44a as certs
 
 RUN apk add --update --no-cache ca-certificates