chore(deps): pin dependencies

.github/workflows/builder.yml

@@ -22,13 +22,13 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y qemu-user-static
       - name: Checkout repository
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Login to ghcr.io
         run: buildah login --username ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }} ${{ env.REGISTRY }}
       - name: Login to quay.io
         run: buildah login --username ${{ secrets.QUAY_USER }} --password ${{ secrets.QUAY_PASSWORD }} quay.io
       - name: Build
-        uses: redhat-actions/buildah-build@v2.12
+        uses: redhat-actions/buildah-build@b4dc19b4ba891854660ab1f88a097d45aa158f76 # v2.12
         with:
           image: ${{ env.IMAGE }}
           tags: latest

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     container:
-      image: quay.io/centos-boot/builder:latest
+      image: quay.io/centos-boot/builder:latest@sha256:234e19e74e1eec123dfab1603d7e3b56f35080becfe635e9232750ca85a95841
       options: --privileged
 
     strategy: