chore: pin and update all workflow dependencies; add permission scopes (#2138)

---------

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
This commit is contained in:
Christopher Angelo Phillips
2023-09-15 14:18:42 -04:00
committed by GitHub
parent 2eb2d55551
commit 094b41b301
26 changed files with 114 additions and 84 deletions
@@ -1,3 +1,3 @@
FROM ubuntu:20.04
FROM ubuntu:20.04@sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba
# this covers rpm-python
RUN apt-get update && apt-get install -y python-pil=6.2.1-3
RUN apt-get update && apt-get install -y python-pil=6.2.1-3