Pin dependencies

LuccaSA · Nov 13, 2024 · 73bebae · 73bebae
1 parent 9963d2b
commit 73bebae
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 12 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the application
-FROM docker.io/library/golang:1.23-bookworm AS back
+FROM docker.io/library/golang:1.23-bookworm@sha256:3f3b9daa3de608f3e869cd2ff8baf21555cf0fca9fd34251b8f340f9b7c30ec5 AS back
 
 WORKDIR /go/src/app
 
@@ -10,7 +10,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -ldflags "-s" -o luc
 
 
 # Build the Svelte SPA
-FROM docker.io/library/debian:bookworm AS front
+FROM docker.io/library/debian:bookworm@sha256:10901ccd8d249047f9761845b4594f121edef079cfd8224edebd9ea726f0a7f6 AS front
 
 WORKDIR /app
 
@@ -28,7 +28,7 @@ RUN npm run build
 
 
 # Image release
-FROM docker.io/library/alpine:latest
+FROM docker.io/library/alpine:latest@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
 
 WORKDIR /root/
 EXPOSE 3000

diff --git a/Dockerfile.dev b/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM debian:bookworm
+FROM debian:bookworm@sha256:10901ccd8d249047f9761845b4594f121edef079cfd8224edebd9ea726f0a7f6
 
 WORKDIR /app
 

diff --git a/front/package.json b/front/package.json
@@ -8,14 +8,14 @@
   },
   "type": "module",
   "devDependencies": {
-    "@rollup/plugin-commonjs": "^28.0.0",
-    "@rollup/plugin-node-resolve": "^15.3.0",
-    "rollup": "^3.29.5",
-    "rollup-plugin-livereload": "^2.0.5",
-    "rollup-plugin-svelte": "^7.2.2",
-    "@rollup/plugin-terser": "^0.4.4",
-    "rollup-plugin-css-only": "^4.5.2",
-    "svelte": "^4.2.19"
+    "@rollup/plugin-commonjs": "28.0.1",
+    "@rollup/plugin-node-resolve": "15.3.0",
+    "rollup": "3.29.5",
+    "rollup-plugin-livereload": "2.0.5",
+    "rollup-plugin-svelte": "7.2.2",
+    "@rollup/plugin-terser": "0.4.4",
+    "rollup-plugin-css-only": "4.5.2",
+    "svelte": "4.2.19"
   },
   "dependencies": {
     "sirv-cli": "^2.0.2"