From 4e471977a7708ca8eaebf3cb6fc357c8315d4c21 Mon Sep 17 00:00:00 2001
From: Lyndon-Li <lyonghui@vmware.com>
Date: Fri, 11 Nov 2022 21:35:30 +0800
Subject: [PATCH] pin velero version

Signed-off-by: Lyndon-Li <lyonghui@vmware.com>
---
 .github/workflows/crds-verify-kind.yaml | 2 +-
 .github/workflows/e2e-test-kind.yaml    | 4 ++--
 .github/workflows/pr-ci-check.yml       | 2 +-
 .github/workflows/push.yml              | 2 +-
 Dockerfile                              | 4 ++--
 Tiltfile                                | 2 +-
 hack/build-image/Dockerfile             | 2 +-
 7 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/crds-verify-kind.yaml b/.github/workflows/crds-verify-kind.yaml
index a7383a98b..effd8f677 100644
--- a/.github/workflows/crds-verify-kind.yaml
+++ b/.github/workflows/crds-verify-kind.yaml
@@ -14,7 +14,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.18
+          go-version: 1.18.8
         id: go
       # Look for a CLI that's made for this PR
       - name: Fetch built CLI
diff --git a/.github/workflows/e2e-test-kind.yaml b/.github/workflows/e2e-test-kind.yaml
index c41c7ff47..fc9d0e688 100644
--- a/.github/workflows/e2e-test-kind.yaml
+++ b/.github/workflows/e2e-test-kind.yaml
@@ -14,7 +14,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.18
+          go-version: 1.18.8
         id: go
       # Look for a CLI that's made for this PR
       - name: Fetch built CLI
@@ -76,7 +76,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.18
+          go-version: 1.18.8
         id: go
       - name: Check out the code
         uses: actions/checkout@v2
diff --git a/.github/workflows/pr-ci-check.yml b/.github/workflows/pr-ci-check.yml
index 2b98f731f..fbc0616bb 100644
--- a/.github/workflows/pr-ci-check.yml
+++ b/.github/workflows/pr-ci-check.yml
@@ -8,7 +8,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.18
+          go-version: 1.18.8
         id: go
       - name: Check out the code
         uses: actions/checkout@v2
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index d00606acd..fce8045cb 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -18,7 +18,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v2
       with:
-        go-version: 1.18
+        go-version: 1.18.8
       id: go
 
     - uses: actions/checkout@v3
diff --git a/Dockerfile b/Dockerfile
index 757b03c07..655c79835 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-FROM --platform=$BUILDPLATFORM golang:1.18 as builder-env
+FROM --platform=$BUILDPLATFORM golang:1.18.8 as builder-env
 
 ARG GOPROXY
 ARG PKG
@@ -48,7 +48,7 @@ RUN mkdir -p /output/usr/bin && \
     go build -o /output/${BIN} \
     -ldflags "${LDFLAGS}" ${PKG}/cmd/${BIN}
 
-FROM gcr.io/distroless/base-debian11:nonroot
+FROM gcr.io/distroless/base-debian11@sha256:4b22ca3c68018333c56f8dddcf1f8b55f32889f2dd12d28ab60856eba1130d04
 
 LABEL maintainer="Nolan Brubaker <brubakern@vmware.com>"
 
diff --git a/Tiltfile b/Tiltfile
index 3ce9aedf7..fb65961dc 100644
--- a/Tiltfile
+++ b/Tiltfile
@@ -50,7 +50,7 @@ git_sha = str(local("git rev-parse HEAD", quiet = True, echo_off = True)).strip(
 
 tilt_helper_dockerfile_header = """
 # Tilt image
-FROM golang:1.18 as tilt-helper
+FROM golang:1.18.8 as tilt-helper
 
 # Support live reloading with Tilt
 RUN wget --output-document /restart.sh --quiet https://raw.githubusercontent.com/windmilleng/rerun-process-wrapper/master/restart.sh  && \
diff --git a/hack/build-image/Dockerfile b/hack/build-image/Dockerfile
index b3c5e42a0..85ba7f717 100644
--- a/hack/build-image/Dockerfile
+++ b/hack/build-image/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.18
+FROM golang:1.18.8
 
 ARG GOPROXY