pin python module versions in workfows and add sha values for base do…

…cker images (#1437)

* add sha for base image

* add tox version

* pip versions

.github/workflows/client-pypi-release.yaml

@@ -19,7 +19,7 @@ jobs:
         with:
           python-version: '3.11'
       - name: Install Deps
-        run: pip install -U twine wheel
+        run: pip install -U twine==5.1.1 wheel==0.44.0
       - name: Build Artifacts
         run: |
           cd client

.github/workflows/client-verify.yaml

@@ -39,7 +39,7 @@ jobs:
 
       - name: Install tox
         run: |
-          pip install tox
+          pip install tox==4.16.0
 
       - name: Run styles check
         run: tox -elint

.github/workflows/docs-verify.yaml

@@ -16,8 +16,8 @@ jobs:
           python-version: '3.11'
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
-          pip install tox
+          python -m pip install --upgrade pip==24.2
+          pip install tox==4.16.0
           sudo apt-get update
           sudo apt-get install -y pandoc
       - name: Build docs

.github/workflows/gateway-verify.yaml

@@ -39,7 +39,7 @@ jobs:
 
       - name: Install tox
         run: |
-          pip install tox
+          pip install tox==4.16.0
 
       - name: Run styles check
         run: tox -elint

.github/workflows/kubernetes-deploy.yaml

@@ -61,7 +61,7 @@ jobs:
           python-version: "3.11"
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip==24.2
           cd client
           pip install . --no-cache-dir
           pip install --no-cache-dir \
@@ -73,7 +73,7 @@ jobs:
             qiskit-ibm-provider>=0.9.0 \
             qiskit-aer>=0.13.3 \
             certifi==2024.7.4
-          pip install nbmake pytest
+          pip install nbmake==1.5.4 pytest==8.3.2
       - name: Run tests
         run: |
           kubectl patch svc gateway -p '{"spec": {"type": "LoadBalancer"}}'

.github/workflows/proxy-verify.yaml

@@ -39,7 +39,7 @@ jobs:
 
       - name: Install tox
         run: |
-          pip install tox
+          pip install tox==4.16.0
 
       - name: Run styles check
         run: tox -elint

.github/workflows/publish-docs.yaml

@@ -21,8 +21,8 @@ jobs:
           python-version: '3.11'
       - name: Install dependencies
         run: |
-          python -m pip install --upgrade pip
-          pip install tox
+          python -m pip install --upgrade pip==24.2
+          pip install tox==4.16.0
           sudo apt-get update
           sudo apt-get install -y pandoc
       - name: Build docs

Dockerfile-ray-node

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9-minimal:9.4
+FROM registry.access.redhat.com/ubi9-minimal:9.4@sha256:104cf11d890aeb7dd5728b7d7732e175a0e4018f1bb00d2faebcc8f6bf29bd52
 RUN microdnf install -y python3.11-3.11.7 python3.11-pip-22.3.1 python3.11-devel-3.11.7 vim-enhanced-8.2.2637 wget-1.21.1 &&\
     microdnf clean all
 RUN ln -s /usr/bin/python3.11 /usr/local/bin/python3 && \

docs/deployment/custom_function/Sample-Dockerfile

@@ -1,4 +1,4 @@
-FROM icr.io/quantum-public/qiskit-serverless/ray-node:0.14.2-py310
+FROM icr.io/quantum-public/qiskit-serverless/ray-node:0.14.2-py310@sha256:e012a6f7159b2660dd87af15bf85029fe62bec22e6bef7d99e54ca0cfa4f3aa6
 
 # install all necessary dependencies for your custom image
 

gateway/Dockerfile

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9-minimal:9.4
+FROM registry.access.redhat.com/ubi9-minimal:9.4@sha256:104cf11d890aeb7dd5728b7d7732e175a0e4018f1bb00d2faebcc8f6bf29bd52
 RUN microdnf install -y python3.11-3.11.7 python3.11-pip-22.3.1 python3.11-devel-3.11.7 vim-enhanced-8.2.2637 &&\
     microdnf clean all
 RUN ln -s /usr/bin/python3.11 /usr/local/bin/python3 && \