Pin dependencies

Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.18 as builder
+FROM golang:1.18@sha256:50c889275d26f816b5314fc99f55425fa76b18fcaf16af255f5d57f09e1f48da as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
@@ -23,7 +23,7 @@ RUN go install github.com/rjeczalik/cmd/[email protected] && \
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM registry.access.redhat.com/ubi8/ubi
+FROM registry.access.redhat.com/ubi8/ubi@sha256:bce7e9f69fb7d4533447232478fd825811c760288f87a35699f9c8f030f2c1a6
 WORKDIR /
 COPY --from=builder /workspace/manager .
 COPY --from=builder /workspace/notify /usr/local/bin

ci.Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.18 as builder
+FROM golang:1.18@sha256:50c889275d26f816b5314fc99f55425fa76b18fcaf16af255f5d57f09e1f48da as builder
 
 WORKDIR /workspace
 
@@ -8,7 +8,7 @@ RUN go install github.com/gen2brain/[email protected] && \
 RUN go install github.com/rjeczalik/cmd/[email protected] && \
     cp ${GOPATH}/bin/notify ./
 
-FROM registry.access.redhat.com/ubi8/ubi
+FROM registry.access.redhat.com/ubi8/ubi@sha256:bce7e9f69fb7d4533447232478fd825811c760288f87a35699f9c8f030f2c1a6
 WORKDIR /
 COPY --from=builder /workspace/notify /usr/local/bin
 COPY --from=builder /workspace/keepalived_exporter /usr/local/bin

config/manager/kustomization.yaml

@@ -13,4 +13,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: quay.io/raffaelespazzoli/keepalived-operator
-  newTag: latest
+  newTag: latest@sha256:111529f93552866682ddb4c8ee43ad0f6371d220c8537a4b5e9e8a764aaf37fc