chore(deps): pin dependencies

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image: docker.io/library/eclipse-temurin:21.0.7_6-jdk-alpine
+image: docker.io/library/eclipse-temurin:21.0.7_6-jdk-alpine@sha256:8e26f8064f2b89bc8543faf43ded3f223f47dd0a7afca042fdc892f1f6a4a8c3
 
 variables:
   MAVEN_OPTS: >-
@@ -69,7 +69,7 @@ package:
 
 docker-build:
   stage: docker-build
-  image: quay.io/buildah/stable
+  image: quay.io/buildah/stable@sha256:01c6a545d91e60325f4d8f645e3e90751a889a2e4a7f430aaca55b81d6a857d6
   script:
     - buildah bud -f Dockerfile -t $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG .
     - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"