.gitea/workflows/build_container.yml

@@ -18,15 +18,15 @@ jobs:
           apt-get update
           apt-get -y install docker-ce docker-ce-cli containerd.io
       - name: Checkout branch
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Login to Gitea
-        uses: docker/login-action@v3.0.0
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
         with:
           registry: ${{ secrets.DOCKER_REGISTRY }}
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Build and push image
-        uses: docker/build-push-action@v5.0.0
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
         with:
           context: .
           file: Dockerfile

docker-compose.yml

@@ -2,7 +2,7 @@ version: '3.8'
 services:
   bot:
     container_name: Corn-Utility
-    image: 'git.toast-server.net/toast/corn-utility:main'
+    image: 'git.toast-server.net/toast/corn-utility:main@sha256:d966d1c466e60617d0059a4d9a3a147baf9228d2a90ed2dbceab4e9ad392e49e'
     volumes:
       - ./tokens.json:/home/corn-util/tokens.json:ro
     expose: