chore(deps): pin dependencies

.drone.yml

@@ -3,7 +3,7 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest@sha256:fc1fa69bea5528db7ba184297735ac1bbd278720910e4cb1f502de9aee14e228
     settings:
       host: swarm-test.autonomic.zone
       stack: example_com  # UPDATE ME
@@ -26,7 +26,7 @@ kind: pipeline
 name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: plugins/downstream
+    image: plugins/downstream@sha256:03ff02d8a5637ea5197fa08929a91dfeeb5e30b1da62b82b6c2a895b170338ca
     settings:
       server: https://build.coopcloud.tech
       token:

compose.yml

@@ -2,7 +2,7 @@ version: "3.8"
 
 services: 
   db:
-    image: postgres:12.3
+    image: postgres:12.3@sha256:a06e6e6e519b7a329c419f8221edec66cfc45511e8b80e262c12103ba745cf19
     deploy:
       labels:
         backupbot.backup: "${ENABLE_BACKUPS:-true}"
@@ -31,7 +31,7 @@ services:
       - internal
 
   app-admin-init:
-    image: taigaio/taiga-back:6.9.0
+    image: taigaio/taiga-back:6.9.0@sha256:70ee08e4416c282437f55b5a5f48e8c3c10390022eac275999366728e227e961
     secrets:
       - taiga_secret
       - postgres_password
@@ -65,7 +65,7 @@ services:
         condition: none
 
   app:
-    image: taigaio/taiga-back:6.9.0
+    image: taigaio/taiga-back:6.9.0@sha256:70ee08e4416c282437f55b5a5f48e8c3c10390022eac275999366728e227e961
     secrets:
       - taiga_secret
       - postgres_password
@@ -107,7 +107,7 @@ services:
     
 
   app-async:
-    image: taigaio/taiga-back:6.9.0
+    image: taigaio/taiga-back:6.9.0@sha256:70ee08e4416c282437f55b5a5f48e8c3c10390022eac275999366728e227e961
     configs: 
       - source: taiga_entrypoint
         target: /custom-entrypoint.sh
@@ -137,7 +137,7 @@ services:
       - internal
      
   rabbitmq-async:
-    image: rabbitmq:3.8-management-alpine
+    image: rabbitmq:3.8-management-alpine@sha256:c3e526769bfd885c898d1132e1008b216800e8543619c30d5959b220285564ef
     secrets:
       - rabbitmq_password
     environment:
@@ -158,7 +158,7 @@ services:
       start_period: 1m
 
   taiga-front:
-    image: taigaio/taiga-front:6.9.0
+    image: taigaio/taiga-front:6.9.0@sha256:35e3345e2a0152e777543b1f5565fd4578804d39b57a4848fe41b723bcce5885
     environment:
       - TAIGA_URL=https://${DOMAIN}
       - TAIGA_WEBSOCKETS_URL=wss://${DOMAIN}
@@ -166,7 +166,7 @@ services:
       - internal
 
   events:
-    image: taigaio/taiga-events:6.9.0
+    image: taigaio/taiga-events:6.9.0@sha256:ebb0d8778707b5066d50f1e96be98ed0435e8cc89dfdc48b78ac2c1fdda914fe
     configs: 
       - source: taiga_events_entrypoint
         target: /custom-entrypoint.sh
@@ -189,7 +189,7 @@ services:
       retries: 5
 
   rabbitmq:
-    image: rabbitmq:3.8-management-alpine
+    image: rabbitmq:3.8-management-alpine@sha256:c3e526769bfd885c898d1132e1008b216800e8543619c30d5959b220285564ef
     secrets:
       - rabbitmq_password
     environment:
@@ -210,7 +210,7 @@ services:
       start_period: 1m
 
   taiga-protected:
-    image: taigaio/taiga-protected:6.9.0
+    image: taigaio/taiga-protected:6.9.0@sha256:5f31fdb311431df45ceca4497abae05a312be9ca657564f20e164f825e9f1d5e
     configs:
       - source: taiga_entrypoint
         target: /custom-entrypoint.sh
@@ -227,7 +227,7 @@ services:
       - internal
 
   web:
-    image: nginx:1.19-alpine
+    image: nginx:1.19-alpine@sha256:07ab71a2c8e4ecb19a5a5abcfb3a4f175946c001c8af288b1aa766d67b0d05d2
     configs:
       - source: nginx_conf
         target: /etc/nginx/conf.d/default.conf