From bd46d5e184933ac314a013518d7c5159b048ca8e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 15:03:12 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 Containerfile           | 4 ++--
 Containerfile.installer | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Containerfile b/Containerfile
index 36c9f5c..e844ca3 100644
--- a/Containerfile
+++ b/Containerfile
@@ -8,7 +8,7 @@ FROM scratch AS ctx
 COPY ./scripts /scripts
 COPY ./files /files
 
-FROM quay.io/fedora/fedora-bootc:latest AS build
+FROM quay.io/fedora/fedora-bootc:latest@sha256:6718b0634e138d1909e752dc0f7d8a203ede6ece33bc637f72282bde3d44887b AS build
 
 COPY --from=ctx files/ /
 
@@ -27,7 +27,7 @@ RUN --network=none \
 # Rechunk the image into component-aligned OCI layers via chunkah.
 # Build must use --skip-unused-stages=false for the oci-archive stage to work.
 # See https://github.com/coreos/chunkah#splitting-an-image-at-build-time-buildahpodman-only
-FROM quay.io/coreos/chunkah:dev AS chunkah
+FROM quay.io/coreos/chunkah:dev@sha256:2fd71607b5446a21cd24dadca1ba55e4d1ed4b26c384d2c5d155ff299f97cc11 AS chunkah
 RUN --mount=from=build,src=/,target=/chunkah,ro \
   chunkah build \
   --prune /sysroot/ \
diff --git a/Containerfile.installer b/Containerfile.installer
index 3837c5b..30be7a4 100644
--- a/Containerfile.installer
+++ b/Containerfile.installer
@@ -1,6 +1,6 @@
 # Installer container for building bootc-installer ISOs
 # This container includes Anaconda and required tools for ISO creation
-FROM quay.io/fedora/fedora-bootc:latest
+FROM quay.io/fedora/fedora-bootc:latest@sha256:6718b0634e138d1909e752dc0f7d8a203ede6ece33bc637f72282bde3d44887b
 
 RUN --mount=type=cache,target=/var/cache \
     --mount=type=cache,target=/var/lib \