Pin Docker images in CI

.drone.yml

@@ -15,14 +15,14 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse
+    image: fsfe/reuse:3.0.2-debian
   - name: lint
-    image: node:20
+    image: node:20.12.2
     commands:
       - npm ci
       - npm run lint
   - name: audit
-    image: node:20
+    image: node:20.12.2
     commands:
       - npm install -g better-npm-audit
       - better-npm-audit audit --production --level=moderate
@@ -43,7 +43,7 @@ depends_on:
 
 steps:
   - name: docker-publish
-    image: plugins/docker
+    image: plugins/docker:20.17.3
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend
@@ -70,7 +70,7 @@ depends_on:
 
 steps:
   - name: deploy-dev
-    image: appleboy/drone-ssh
+    image: appleboy/drone-ssh:1.7.5
     settings:
       host:
         - dev01.wtf-eg.net
@@ -92,14 +92,14 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse
+    image: fsfe/reuse:3.0.2-debian
   - name: lint
-    image: node:20
+    image: node:20.12.2
     commands:
       - npm ci
       - npm run lint
   - name: docker-publish
-    image: plugins/docker
+    image: plugins/docker:20.17.3
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend

Dockerfile

@@ -2,14 +2,14 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM node:20-alpine as builder
+FROM node:20.12.2-alpine as builder
 
 COPY . ./
 
 RUN npm ci && npm run build
 
 
-FROM nginx as ki-frontend
+FROM nginx:1.24-alpine as ki-frontend
 
 COPY --from=builder /dist/ /usr/share/nginx/html/
 COPY etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@wtf/ki-frontend",
-  "version": "0.1.0",
+  "version": "1.1.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@wtf/ki-frontend",
-      "version": "0.1.0",
+      "version": "1.1.0",
       "devDependencies": {
         "@babel/eslint-parser": "7.23.10",
         "@vue/cli-plugin-babel": "~5.0.8",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtf/ki-frontend",
-  "version": "0.1.0",
+  "version": "1.1.0",
   "scripts": {
     "serve": "vue-cli-service serve",
     "build": "vue-cli-service build",