From bf34ff6240e14f5de993405226368a6ef4dbd7da Mon Sep 17 00:00:00 2001
From: "renovate-pagopa[bot]"
 <164534245+renovate-pagopa[bot]@users.noreply.github.com>
Date: Thu, 23 Jan 2025 06:16:12 +0000
Subject: [PATCH] Pin dependencies

---
 .github/actions/check-pr-semver-labels/action.yml      | 2 +-
 .github/workflows/check_pr.yml                         | 2 +-
 .github/workflows/deploy.yml                           | 4 ++--
 docker-local/wallet-events-producer-testing/Dockerfile | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/actions/check-pr-semver-labels/action.yml b/.github/actions/check-pr-semver-labels/action.yml
index abfbe10..fed48af 100644
--- a/.github/actions/check-pr-semver-labels/action.yml
+++ b/.github/actions/check-pr-semver-labels/action.yml
@@ -21,7 +21,7 @@ runs:
   steps:
     - name: Retrieve semantic versioning labels on PR
       id: check_labels
-      uses: actions/github-script@v6.3.3
+      uses: actions/github-script@d556feaca394842dc55e4734bf3bb9f685482fa0 # v6.3.3
       env:
         VALID_APP_VERSION_LABELS: patch, minor, major, ignore-for-release
         VALID_CHART_VERSION_LABELS: chart-patch, chart-minor, chart-major
diff --git a/.github/workflows/check_pr.yml b/.github/workflows/check_pr.yml
index 87079a3..aee3d0e 100644
--- a/.github/workflows/check_pr.yml
+++ b/.github/workflows/check_pr.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1
       - uses: ./.github/actions/check-pr-semver-labels
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 4bd4156..2cde3d1 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -18,7 +18,7 @@ jobs:
       semver_chart: ${{ steps.semver_labels.outputs.semver_chart }}
       skip_release: ${{ steps.semver_labels.outputs.skip_release }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           token: ${{ secrets.github_token }}
       - uses: ./.github/actions/check-pr-semver-labels
@@ -66,7 +66,7 @@ jobs:
           echo "SKIP_BUILD=${{ steps.configure_pipeline_parameters.outputs.SKIP_BUILD }}"
         shell: bash
       - name: Azure Pipelines Action
-        uses: jacopocarlini/azure-pipelines@v1.3
+        uses: jacopocarlini/azure-pipelines@b9721743a54e862597395b4a70727cfdc03028fb # v1.3
         with:
           azure-devops-project-url: https://dev.azure.com/pagopaspa/pagoPA-projects
           azure-pipeline-name: 'pagopa-payment-wallet-cdc-service.deploy'
diff --git a/docker-local/wallet-events-producer-testing/Dockerfile b/docker-local/wallet-events-producer-testing/Dockerfile
index c2e8351..eea5447 100644
--- a/docker-local/wallet-events-producer-testing/Dockerfile
+++ b/docker-local/wallet-events-producer-testing/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18
+FROM node:18@sha256:720eeea325b3da50e108ba34dde0fd69feeb3c59485199c5e22b0ea49a792aa5
 
 WORKDIR /usr/src/app