From ebd8bbe804be0ddaf6b5924ef43483d2fba1a412 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 21 Feb 2025 14:31:54 +0000
Subject: [PATCH] Pin dependencies

---
 .github/workflows/build-latest-docker-image.yml    |  8 ++++----
 .github/workflows/build-published-docker-image.yml | 10 +++++-----
 Dockerfile                                         |  2 +-
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build-latest-docker-image.yml b/.github/workflows/build-latest-docker-image.yml
index 2d1f821..a580aa7 100644
--- a/.github/workflows/build-latest-docker-image.yml
+++ b/.github/workflows/build-latest-docker-image.yml
@@ -20,20 +20,20 @@ jobs:
 
     steps:
       - name: Checkout and download repository to workflow runner
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up docker builder
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3
 
       - name: Login to github container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push image to github container registry
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
         with:
           context: .
           load: true
diff --git a/.github/workflows/build-published-docker-image.yml b/.github/workflows/build-published-docker-image.yml
index 595e877..65f8b6e 100644
--- a/.github/workflows/build-published-docker-image.yml
+++ b/.github/workflows/build-published-docker-image.yml
@@ -19,13 +19,13 @@ jobs:
 
     steps:
       - name: Checkout and download repository to workflow runner
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up docker builder
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3
 
       - name: Login to github container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -33,12 +33,12 @@ jobs:
 
       - name: Get metadata from docker image
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push image to github container registry
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
         with:
           context: .
           load: true
diff --git a/Dockerfile b/Dockerfile
index 03b13f2..ba1b893 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,5 +18,5 @@ RUN xk6 build --output /k6 \
     --with github.com/grafana/xk6-loki@v${XK6_LOKI_VERSION}
 
 # Use the operator's base image and override the k6 binary
-FROM grafana/k6:0.56.0
+FROM grafana/k6:0.56.0@sha256:89684628f98358ba6cc1a2e604bf2b05d49aad43611ece73a44aafcec06fcf28
 COPY --from=builder /k6 /usr/bin/k6
\ No newline at end of file