From bdd173627ad69326b00e125557d264b4e2e4ce22 Mon Sep 17 00:00:00 2001
From: "pactflow-renovate-bot[bot]"
 <186667433+pactflow-renovate-bot[bot]@users.noreply.github.com>
Date: Mon, 17 Feb 2025 22:47:36 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/build.yml               | 6 +++---
 .github/workflows/verify_changed_pact.yml | 4 ++--
 docker-compose.yml                        | 4 ++--
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c7be759..c719f46 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Test (ruby standalone - docker)
         run: GIT_BRANCH=${GITHUB_REF:11} make test
       - name: Test (native standalone - docker)
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Can I deploy?
         run: GIT_BRANCH=${GITHUB_REF:11} make can_i_deploy
@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: can-i-deploy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Deploy
         run: GIT_BRANCH=${GITHUB_REF:11} make deploy
diff --git a/.github/workflows/verify_changed_pact.yml b/.github/workflows/verify_changed_pact.yml
index 8dc58c8..45bc2d4 100644
--- a/.github/workflows/verify_changed_pact.yml
+++ b/.github/workflows/verify_changed_pact.yml
@@ -17,8 +17,8 @@ jobs:
   verify-changed-pact:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5
         with:
           python-version: '3.8' 
           architecture: 'x64' 
diff --git a/docker-compose.yml b/docker-compose.yml
index 89a3418..2eacd63 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,7 +10,7 @@ services:
       - PORT=8000
 
   pact_verifier:
-    image: pactfoundation/pact-cli:latest
+    image: pactfoundation/pact-cli:latest@sha256:68a2a0b467b839c83abc802b39c84279c10b5ef1aa7758f1c4109f59b7f95841
     depends_on:
       - api
     environment:
@@ -32,7 +32,7 @@ services:
       --wait 10
   
   pact_verifier_native:
-    image: pactfoundation/pact-ref-verifier:latest
+    image: pactfoundation/pact-ref-verifier:latest@sha256:c511079f839bf4f291534e36a416f03f4372660851ce4f2aeaffcfd3450e71cf
     depends_on:
       - api
     environment: