chore(deps): pin dependencies

Author: renovate[bot]

.github/workflows/continuous-integration.yml

@@ -16,6 +16,6 @@ jobs:
         with:
           version: v0.8.6
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Compile.
         run: earthly --ci +compile

.github/workflows/conventional-commits.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           version: v0.8.6
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/git-history.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           version: v0.8.6
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0

.github/workflows/github-actions-workflows.yml

@@ -16,7 +16,7 @@ jobs:
         with:
           version: v0.8.6
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check GitHub Actions workflows linting.
         run: earthly +check-github-actions-workflows-linting
   formatting:
@@ -28,6 +28,6 @@ jobs:
         with:
           version: v0.8.6
       - name: Checkout code.
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check formatting.
         run: earthly +check-yaml-formatting

.github/workflows/release-please.yml

@@ -14,6 +14,6 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4
         with:
           token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }}

Earthfile

@@ -48,7 +48,7 @@ check-conventional-commits-linting:
 
 
 golang-base:
-    FROM golang:1.22.1
+    FROM golang:1.22.1@sha256:0b55ab82ac2a54a6f8f85ec8b943b9e470c39e32c109b766bbc1b801f3fa8d3b
     WORKDIR "/nasm-x86-shellcode-generator"