Pin dependencies

.github/workflows/ci.yml

@@ -19,19 +19,19 @@ jobs:
  runs-on: ${{ matrix.os }}
  steps:
  - name: Checkout current branch (full)
- uses: actions/checkout@v2
+ uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
  with:
  fetch-depth: 0
 
  - name: Setup Java (temurin@11)
  if: matrix.java == 'temurin@11'
- uses: actions/setup-java@v2
+ uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9 # v2
  with:
  distribution: temurin
  java-version: 11
 
  - name: Cache sbt
- uses: actions/cache@v2
+ uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2
  with:
  path: |
  ~/.sbt
@@ -43,7 +43,7 @@ jobs:
  key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}
 
  - name: Install node 16
- uses: actions/setup-node@v3
+ uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
  with:
  node-version: 16
 
@@ -60,7 +60,7 @@ jobs:
  run: tar cf targets.tar target generated/target kafka-manager/target client/target project/target
 
  - name: Upload target directories
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # v2
  with:
  name: target-${{ matrix.os }}-${{ matrix.scala }}-${{ matrix.java }}
  path: targets.tar
@@ -81,19 +81,19 @@ jobs:
  runs-on: ${{ matrix.os }}
  steps:
  - name: Checkout current branch (full)
- uses: actions/checkout@v2
+ uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
  with:
  fetch-depth: 0
 
  - name: Setup Java (temurin@11)
  if: matrix.java == 'temurin@11'
- uses: actions/setup-java@v2
+ uses: actions/setup-java@91d3aa4956ec4a53e477c4907347b5e3481be8c9 # v2
  with:
  distribution: temurin
  java-version: 11
 
  - name: Cache sbt
- uses: actions/cache@v2
+ uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2
  with:
  path: |
  ~/.sbt
@@ -105,7 +105,7 @@ jobs:
  key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}
 
  - name: Download target directories (2.13.8)
- uses: actions/download-artifact@v2
+ uses: actions/download-artifact@cbed621e49e4c01b044d60f6c80ea4ed6328b281 # v2
  with:
  name: target-${{ matrix.os }}-2.13.8-${{ matrix.java }}
 
@@ -115,7 +115,7 @@ jobs:
  rm targets.tar
 
  - name: Install node 16
- uses: actions/setup-node@v3
+ uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
  with:
  node-version: 16
 
@@ -125,13 +125,13 @@ jobs:
  - name: Get 0.1.x-SNAPSHOTS versionIds
  id: version
  if: github.ref == 'refs/heads/0.1.x'
- uses: castlabs/[email protected]
+ uses: castlabs/get-package-version-id-action@61097d3d0b65fa880de6de674e8b70e1fff6730b # v2.0
  with:
  version: 0.1.x-SNAPSHOT
 
  - name: Deleting 0.1.x-SNAPSHOTS versions
  if: ${{ github.ref == 'refs/heads/0.1.x' && steps.version.outputs.ids != '' }}
- uses: actions/delete-package-versions@v2
+ uses: actions/delete-package-versions@000223ef3eaa3505c63d4c610f57ef103bcab46d # v2
  with:
  package-version-ids: ${{ steps.version.outputs.ids }}
 
@@ -142,7 +142,7 @@ jobs:
  run: sbt ++${{ matrix.scala }} "project client" publish
 
  - name: Login to GitHub Container Registry
- uses: docker/login-action@v2
+ uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
  with:
  registry: ghcr.io
  username: ${{ github.actor }}

docker-compose.yaml

@@ -1,7 +1,7 @@
 version: '3.0'
 services:
  postgres:
- image: postgres:10.6
+ image: postgres:10.6@sha256:1bd46192a12a1012d52f41186c83dc343b4b2d07ad9836fb37a08cdf22041537
  ports:
  - '5432:5432'
  environment: