From 64e0405e687e4f3ba528b6e31c4c4e3dce674588 Mon Sep 17 00:00:00 2001
From: Renovate Bot <renovate@unbound.se>
Date: Fri, 9 Jan 2026 08:01:09 +0000
Subject: [PATCH] chore(deps): pin dependencies (#233)

---
 Dockerfile      | 2 +-
 k8s/deploy.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index c942b74..1be867a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ RUN go mod download
 COPY . .
 RUN go build -ldflags="-s -w" -o /release/service ./cmd/service
 
-FROM gcr.io/distroless/static-debian12
+FROM gcr.io/distroless/static-debian12@sha256:4b2a093ef4649bccd586625090a3c668b254cfe180dee54f4c94f3e9bd7e381e
 
 ENV TZ=Europe/Stockholm
 ENV AUDIENCE="https://shiny.unbound.se"
diff --git a/k8s/deploy.yaml b/k8s/deploy.yaml
index ff36036..125fe05 100644
--- a/k8s/deploy.yaml
+++ b/k8s/deploy.yaml
@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: auth0mock
-          image: oci.unbound.se/unboundsoftware/auth0mock:${COMMIT}
+          image: oci.unbound.se/unboundsoftware/auth0mock@sha256:1cd8b8f90df625ef530c35a18e1493eeced799b90a1e01c79212c3d0eb9a3187:${COMMIT}
           imagePullPolicy: "IfNotPresent"
           resources:
             requests: