chore(deps): pin dependencies

.github/workflows/push.yaml

@@ -12,20 +12,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check Out Repo 
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: "Setup buildx"
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # v1
 
       - name: "Login into ghcr"
-        uses: docker/login-action@v1
+        uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: "Build image"
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a # v2
         with:
           context: .
           push: true

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.8-slim-buster
+FROM python:3.8-slim-buster@sha256:8799b0564103a9f36cfb8a8e1c562e11a9a6f2e3bb214e2adc23982b36a04511
 
 WORKDIR /app
 

docker-compose.yaml

@@ -1,14 +1,14 @@
 services:
   grafana:
-    image: 'grafana/grafana-oss'
+    image: 'grafana/grafana-oss@sha256:83749231c3835e390a3144e5e940203e42b9589761f20ef3169c716e734ad505'
     ports:
       - "3000:3000"
     links:
       - prometheus
     dns:
       - 8.8.8.8
   prometheus:
-    image: 'prom/prometheus'
+    image: 'prom/prometheus@sha256:dda13e28bf95a5e5ca5b8ed56852006094c1c8e8871d9c9dbeed30aa6e55271f'
     volumes:
       - ./prometheus/:/etc/prometheus/
     command: 
@@ -18,7 +18,7 @@ services:
     links:
       - traffic
   traffic:
-    image: 'ghcr.io/grafana/github-traffic'
+    image: 'ghcr.io/grafana/github-traffic@sha256:94a9546415e019484a5d3197138148d3ffcb17842c8e852584f03a9848e6f407'
     ports: 
       - "8001:8001"
     env_file: