🔧 Pin All Docker Images in GitHub Actions Workflows

[Nicoretti]

Summary

Pin all used Docker images in GitHub Actions workflows to specific image versions for the provided templates as well as the workflows for the repository itself.

Background & Context

Locking Docker images to specific versions ensures that the execution environment remains consistent and reproducible. This is especially important in the context of automatic updates or changes applied to the :latest image tags by GitHub or Docker Hub. By pinning the images, we can avoid unexpected breaking changes and maintain a stable CI/CD pipeline.

Example

Before:

...
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
        ...

After:

...
jobs:
  build:
    runs-on: ubuntu-24.04
    steps:
        ...

References

• Runners
• GitHub Actions Documentation