chore(deps): pin dependencies

.github/workflows/call_opex_api.yml

@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: pagopa/[email protected]
+      - uses: pagopa/opex-dashboard-azure-action@ece3bc2b133be74cabb50aec14cdb9b8051b886f # v1.1.2
         with:
           environment: prod
           api-name: ${{ env.API_NAME }}

.github/workflows/call_pr_opex_api.yml

@@ -72,7 +72,7 @@ jobs:
 
       - name: Post Plan on PR
         id: terraform_plan_comment
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         if: github.event_name == 'pull_request'
         with:
           script: |

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.13.0 as builder
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646 as builder
 
 WORKDIR /usr/src/app
 
@@ -7,7 +7,7 @@ COPY / /usr/src/app/
 RUN yarn install \
   && yarn predeploy
 
-FROM node:18.13.0-alpine
+FROM node:18.13.0-alpine@sha256:fda98168118e5a8f4269efca4101ee51dd5c75c0fe56d8eb6fad80455c2f5827
 LABEL maintainer="https://pagopa.gov.it"
 
 # Install major CA certificates to cover

docker-compose.yml

@@ -27,7 +27,7 @@ services:
 
   spid-testenv2:
     container_name: spid-testenv2
-    image: italia/spid-testenv2
+    image: italia/spid-testenv2@sha256:196c9121f6e50d197e251704518ec487c24579f2e3e9c88e7094d9c2ea7c4ded
     ports:
       - "8088:8088"
     volumes:
@@ -149,7 +149,7 @@ services:
       - 'REDIS_CLUSTER_CREATOR=yes'
 
   storage:
-    image: mcr.microsoft.com/azure-storage/azurite
+    image: mcr.microsoft.com/azure-storage/azurite@sha256:647c63a91102a9d8e8000aab803436e1fc85fbb285e7ce830a82ee5d6661cf37
     container_name: storage
     hostname: azurite
     restart: always

docker/images/tools/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18.13.0
+FROM node:18.13.0@sha256:d871edd5b68105ebcbfcde3fe8c79d24cbdbb30430d9bd6251c57c56c7bd7646
 LABEL maintainer="https://teamdigitale.governo.it"
 RUN apt-get update && apt-get install -y --no-install-recommends libunwind8 \
 && \

package.json

@@ -125,49 +125,49 @@
     "xmldom": "^0.6.0"
   },
   "devDependencies": {
-    "@pagopa/eslint-config": "^3.0.0",
-    "@pagopa/openapi-codegen-ts": "^13.1.0",
-    "@types/dotenv": "^4.0.2",
+    "@pagopa/eslint-config": "3.0.0",
+    "@pagopa/openapi-codegen-ts": "13.1.0",
+    "@types/dotenv": "4.0.3",
     "@types/express": "4.17.11",
-    "@types/express-enforces-ssl": "^1.1.1",
-    "@types/glob": "^5.0.35",
-    "@types/helmet": "^0.0.43",
-    "@types/jest": "^29.5.1",
+    "@types/express-enforces-ssl": "1.1.1",
+    "@types/glob": "5.0.36",
+    "@types/helmet": "0.0.43",
+    "@types/jest": "29.5.1",
     "@types/jsonwebtoken": "7.2.7",
     "@types/lolex": "2.1.3",
-    "@types/morgan": "^1.7.35",
-    "@types/node": "~18.13.0",
-    "@types/node-fetch": "^2.1.2",
-    "@types/passport": "^1.0.2",
-    "@types/passport-http-bearer": "^1.0.34",
-    "@types/passport-local": "^1.0.33",
-    "@types/passport-saml": "^1.1.1",
-    "@types/passport-strategy": "^0.2.35",
-    "@types/qr-image": "^3.2.2",
-    "@types/range_check": "^1.4.0",
-    "@types/request-ip": "^0.0.34",
-    "@types/superagent": "^3.8.4",
-    "@types/supertest": "^2.0.6",
-    "@types/swagger-parser": "^4.0.2",
-    "@types/validator": "^9.4.2",
-    "@types/xml2js": "^0.4.5",
-    "@types/xmldom": "^0.1.29",
-    "auto-changelog": "^2.2.1",
-    "dotenv-cli": "^3.1.0",
-    "eslint-plugin-prettier": "^4.2.1",
-    "jest": "^29.5.0",
+    "@types/morgan": "1.9.0",
+    "@types/node": "18.13.0",
+    "@types/node-fetch": "2.5.5",
+    "@types/passport": "1.0.3",
+    "@types/passport-http-bearer": "1.0.37",
+    "@types/passport-local": "1.0.33",
+    "@types/passport-saml": "1.1.1",
+    "@types/passport-strategy": "0.2.35",
+    "@types/qr-image": "3.2.2",
+    "@types/range_check": "1.4.0",
+    "@types/request-ip": "0.0.34",
+    "@types/superagent": "3.8.7",
+    "@types/supertest": "2.0.8",
+    "@types/swagger-parser": "4.0.3",
+    "@types/validator": "9.4.4",
+    "@types/xml2js": "0.4.5",
+    "@types/xmldom": "0.1.29",
+    "auto-changelog": "2.2.1",
+    "dotenv-cli": "3.1.0",
+    "eslint-plugin-prettier": "4.2.1",
+    "jest": "29.5.0",
     "lolex": "4.2.0",
-    "modclean": "^3.0.0-beta.1",
-    "nodemon": "^2.0.22",
-    "npm-run-all": "^4.1.3",
-    "prettier": "^2.8.8",
-    "shx": "^0.3.2",
-    "superagent": "^3.8.3",
-    "supertest": "^3.3.0",
-    "swagger-cli": "^2.3.1",
-    "swagger-parser": "^5.0.5",
-    "ts-jest": "^29.1.0",
-    "ts-node": "^7.0.1",
+    "modclean": "3.0.0-beta.1",
+    "nodemon": "2.0.22",
+    "npm-run-all": "4.1.5",
+    "prettier": "2.8.8",
+    "shx": "0.3.2",
+    "superagent": "3.8.3",
+    "supertest": "3.4.2",
+    "swagger-cli": "2.3.5",
+    "swagger-parser": "5.0.6",
+    "ts-jest": "29.1.0",
+    "ts-node": "7.0.1",
     "typescript": "4.9.5"
   },
   "jest": {