chore(deps): pin dependencies

.github/workflows/build.yml

@@ -24,7 +24,7 @@ jobs:
           - "-DMINIMALISTIC_BUILD"
     steps:
       - name: Check out source code
-        uses: actions/[email protected]
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
 
       - name: Install dependencies
         run: sudo apt-get -qq update && sudo apt-get install -y libev-dev

.github/workflows/docker.yml

@@ -30,10 +30,10 @@ jobs:
             image: wildwildangel/mysql-honeypotd-min
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
 
       - name: Set up QEMU
-        uses: docker/[email protected]
+        uses: docker/setup-qemu-action@c308fdd69d26ed66f4506ebd74b180abe5362145 # v1.1.0
 
       - name: Prepare
         id: prep
@@ -65,25 +65,25 @@ jobs:
           echo ::set-output name=created::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
 
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1
         with:
           username: ${{ secrets.DOCKER_LOGIN }}
           password: ${{ secrets.DOCKER_PASSWORD }}
         if: ${{ github.event_name != 'pull_request' }}
 
       - name: Set up Docker Buildx
-        uses: docker/[email protected]
+        uses: docker/setup-buildx-action@0d135e0c2fc0dba0729c1a47ecfcf5a3c7f8579e # v1.3.0
 
       - name: Cache Docker layers
-        uses: actions/[email protected]
+        uses: actions/cache@1a9e2138d905efd099035b49d8b7a3888c653ca8 # v2.1.5
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}
           restore-keys: |
             ${{ runner.os }}-buildx-
 
       - name: Build and push
-        uses: docker/[email protected]
+        uses: docker/build-push-action@e1b7f96249f2e4c8e4ac1519b9608c0d48944a1f # v2.4.0
         with:
           platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/ppc64le,linux/s390x
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/dockerhub-description.yml

@@ -19,18 +19,18 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
 
       - name: Docker Hub Description
-        uses: peter-evans/[email protected]
+        uses: peter-evans/dockerhub-description@4b076256d20bc4b2997c02eaac7bba806175c2b2 # v2.4.2
         with:
           username: ${{ secrets.DOCKER_LOGIN }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           repository: wildwildangel/mysql-honeypotd
           short-description: A low-interaction MySQL honeypot
 
       - name: Docker Hub Description
-        uses: peter-evans/[email protected]
+        uses: peter-evans/dockerhub-description@4b076256d20bc4b2997c02eaac7bba806175c2b2 # v2.4.2
         with:
           username: ${{ secrets.DOCKER_LOGIN }}
           password: ${{ secrets.DOCKER_PASSWORD }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.13 AS deps
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS deps
 RUN apk add --no-cache gcc make libc-dev libev-dev
 WORKDIR /src/mysql-honeypotd
 COPY . /src/mysql-honeypotd
@@ -16,7 +16,7 @@ ENV \
     LDFLAGS="-static"
 RUN make && strip mysql-honeypotd
 
-FROM alpine:3.13 AS release-dynamic
+FROM alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911 AS release-dynamic
 RUN apk add --no-cache libev
 COPY --from=build-dynamic /src/mysql-honeypotd/mysql-honeypotd /usr/bin/mysql-honeypotd
 EXPOSE 3306