Pin dependencies

LuccaSA · Dec 25, 2024 · 30d92ef · 30d92ef
1 parent 9963d2b
commit 30d92ef
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 12 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the application
-FROM docker.io/library/golang:1.23-bookworm AS back
+FROM docker.io/library/golang:1.23-bookworm@sha256:6546e4d3271d1ba19159f10b77c04afa524afd0d1acc52cdae51e8a9e0399149 AS back
 
 WORKDIR /go/src/app
 
@@ -10,7 +10,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -ldflags "-s" -o luc
 
 
 # Build the Svelte SPA
-FROM docker.io/library/debian:bookworm AS front
+FROM docker.io/library/debian:bookworm@sha256:6001f38763856a0181c479eb4844467ea3dcb843335e0d8404e6b366a271c9ae AS front
 
 WORKDIR /app
 
@@ -28,7 +28,7 @@ RUN npm run build
 
 
 # Image release
-FROM docker.io/library/alpine:latest
+FROM docker.io/library/alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
 
 WORKDIR /root/
 EXPOSE 3000

diff --git a/Dockerfile.dev b/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM debian:bookworm
+FROM debian:bookworm@sha256:6001f38763856a0181c479eb4844467ea3dcb843335e0d8404e6b366a271c9ae
 
 WORKDIR /app
 

diff --git a/front/package.json b/front/package.json
@@ -8,14 +8,14 @@
   },
   "type": "module",
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^28.0.0",
-    "@rollup/plugin-node-resolve": "^15.3.0",
-    "rollup": "^3.29.5",
-    "rollup-plugin-livereload": "^2.0.5",
-    "rollup-plugin-svelte": "^7.2.2",
-    "@rollup/plugin-terser": "^0.4.4",
-    "rollup-plugin-css-only": "^4.5.2",
-    "svelte": "^4.2.19"
+    "@rollup/plugin-commonjs": "28.0.2",
+    "@rollup/plugin-node-resolve": "15.3.1",
+    "rollup": "3.29.5",
+    "rollup-plugin-livereload": "2.0.5",
+    "rollup-plugin-svelte": "7.2.2",
+    "@rollup/plugin-terser": "0.4.4",
+    "rollup-plugin-css-only": "4.5.2",
+    "svelte": "4.2.19"
   },
   "dependencies": {
     "sirv-cli": "^2.0.2"