Pin dependencies

.gitea/workflows/release/build-image.yaml

@@ -19,7 +19,7 @@ jobs:
           password: ${{ secrets.OVH_REGISTRY_PASSWORD }}
 
       - name: Install Dependencies and Build Assets
-        uses: docker://chill/base-image:8.4-edge
+        uses: docker://chill/base-image:8.4-edge@sha256:03f89c0491b0cb39a31a8069d51f950af34536df124da59669122d3a6100d8d3
         env:
           APP_ENV: prod
         with:

.gitea/workflows/release/update-composer-lock.yaml

@@ -19,7 +19,7 @@ jobs:
               with:
                 cmd: 'cat composer.lock | jq --raw-output ''.packages[] | select ( .name | contains ("chill-project/chill-bundles")) | .version'''
             - name: run composer update to update composer.lock
-              uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest
+              uses: docker://gitea.champs-libres.be/chill-project/chill-skeleton-basic/base-image:latest@sha256:d728a939475e465c488056ec8b9c12f31601ea27251aad830499577857b7be94
               with:
                   # this is where we set the command to execute
                   args: composer update --no-install