Pin dependencies

.github/workflows/continuous-integration-terraform.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
 
       - name: Terraform Validate
-        uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@v1.2.1
+        uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@2608ca06a7f06e1869364c028a8d035d23627acc # v1.2.1
         with:
           terraform_version: '1.10.5'
           tflint_version: 'v0.44.1'

.github/workflows/deploy.yml

@@ -70,7 +70,7 @@ jobs:
     needs: [ set-env ]
     steps:
       - name: Validate Packages
-        uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@v1
+        uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@769212b22326c2c43b49739b883683f97098e2ea # v1
         with:
           environment: ${{ needs.set-env.outputs.environment }}
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/environment-matrix-dashboard.yml

@@ -18,7 +18,7 @@ jobs:
       deployments: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Generate Matrix Table
         env:

src/DfE.ExternalApplications.Web/Dockerfile

@@ -1,7 +1,7 @@
 # See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging.
 
 # This stage is used when running from VS in fast mode (Default for Debug configuration)
-FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS base
+FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:1fa23fc4872d95fd71c2833ebe65d7e84a43b2d51a31d119516852f13d9505a7 AS base
 USER $APP_UID
 WORKDIR /app
 EXPOSE 8080
@@ -10,7 +10,7 @@ EXPOSE 5001
 
 
 # This stage is used to build the service project
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:ed034a8bf0b24ded0cbbac07e17825d8e9ebfe21e308191d0f7421eaf5ad4664 AS build
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
 COPY ["src/DfE.ExternalApplications.Web/DfE.ExternalApplications.Web.csproj", "src/DfE.ExternalApplications.Web/"]

src/Tests/DfE.ExternalApplications.CypressTests/package.json

@@ -19,16 +19,16 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "cypress": "^15.8.1",
-    "cypress-axe": "^1.7.0",
-    "cypress-file-upload": "^5.0.8",
-    "cypress-multi-reporters": "^2.0.4",
+    "cypress": "15.18.0",
+    "cypress-axe": "1.7.0",
+    "cypress-file-upload": "5.0.8",
+    "cypress-multi-reporters": "2.0.5",
     "eslint": "^10.6.0",
     "eslint-plugin-cypress": "^6.4.2",
     "mochawesome": "^7.1.4",
     "mochawesome-merge": "^5.1.1",
     "mochawesome-report-generator": "^6.0.1",
-    "typescript": "^6.0.3",
+    "typescript": "6.0.3",
     "typescript-eslint": "^8.15.0"
   },
   "overrides": {