From d115ebc1ac9ed8f09ff996fdd1fe42f457c4d2d1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 16 Dec 2024 19:58:48 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/build.yml   | 6 +++---
 .github/workflows/release.yml | 8 ++++----
 Dockerfile                    | 2 +-
 helm/gorge/values.yaml        | 2 +-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fb6c893..bf5b3b8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,15 +17,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: ^1.22
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6
         with:
           distribution: goreleaser
           version: latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8145d25..f814d97 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,20 +15,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: ^1.22
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6
         with:
           distribution: goreleaser
           version: latest
diff --git a/Dockerfile b/Dockerfile
index 4f45ca5..40c9049 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.20
+FROM alpine:3.20@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
 RUN adduser -k /dev/null -u 10001 -D gorge \
   && chgrp 0 /home/gorge \
   && chmod -R g+rwX /home/gorge
diff --git a/helm/gorge/values.yaml b/helm/gorge/values.yaml
index 1ea8aa8..4848ee1 100644
--- a/helm/gorge/values.yaml
+++ b/helm/gorge/values.yaml
@@ -43,7 +43,7 @@ image:
   # type: string
   # @schema
   # -- Image tag to use.
-  tag: latest
+  tag: latest@sha256:33f11678e1b6faf14431485bbdee428177697cdff43d1595654635aed46ee919
 
 # @schema
 # type: array