[StepSecurity] Apply security best practices

step-security-bot · step-security-bot · commit c245afefe957 · 2025-01-27T23:48:59.000Z
Signed-off-by: StepSecurity Bot &lt;bot@stepsecurity.io&gt;
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -60,3 +60,53 @@ updates:
       - dependencies
     assignees:
       - jaybuidl
+
+  - package-ecosystem: npm
+    directory: /contracts
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /eslint-config
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /kleros-app
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /kleros-sdk
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /prettier-config
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /services/bots/base
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /subgraph
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /tsconfig
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /web-devtools
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: /web
+    schedule:
+      interval: daily
diff --git a/.github/workflows/sentry-release.yml b/.github/workflows/sentry-release.yml
@@ -72,7 +72,7 @@ jobs:
       working-directory: web
 
     - name: Create Sentry release
-      uses: getsentry/action-release@v1
+      uses: getsentry/action-release@f6dfa3d84a1c740b94aa45255c5e032b744a095d # v1.9.0
       env:
         SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
         SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
diff --git a/services/bots/base/Dockerfile b/services/bots/base/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine
+FROM node:20-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4
 
 WORKDIR /usr/src/app
 

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM node:20-alpine`
	`1`	`+FROM node:20-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4`
`2`	`2`
`3`	`3`	`WORKDIR /usr/src/app`
`4`	`4`