Dont pin docker tag by sha256

.gitea/workflows/deploy.yml

@@ -25,10 +25,10 @@ jobs:
           bash -n create-ci-kubeconfig.sh
           bash -n test.sh
           docker run --rm --interactive \
-            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c" \
+            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}" \
             -strict -ignore-missing-schemas -summary < anubis.yaml
           docker run --rm --interactive \
-            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c" \
+            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}" \
             -strict -summary < ci-deployer.yaml
 
   deploy:
@@ -45,10 +45,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/kubectl" \
             "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/kubectl.sha256" \
-            "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256"
-          printf '%s  %s\n' "$(cat "${RUNNER_TEMP}/kubectl.sha256")" "${RUNNER_TEMP}/kubectl" | sha256sum --check
           chmod 0700 "${RUNNER_TEMP}/kubectl"
 
       - name: Configure Kubernetes access

anubis.yaml

@@ -15,13 +15,13 @@ data:
         action: CHALLENGE
         challenge:
           algorithm: fast
-          difficulty: 6
+          difficulty: 5
       - name: non-browser-proof-of-work
         expression: "true"
         action: CHALLENGE
         challenge:
           algorithm: fast
-          difficulty: 6
+          difficulty: 5
 
     status_codes:
       CHALLENGE: 200
@@ -57,7 +57,7 @@ spec:
       automountServiceAccountToken: false
       containers:
         - name: anubis
-          image: ghcr.io/techarohq/anubis:v1.27.0@sha256:8828275668b7bc675679f100970f9714f731388fbbf66ae94de8aca952e3fc4a
+          image: ghcr.io/techarohq/anubis:v1.27.0
           imagePullPolicy: IfNotPresent
           env:
             - name: BIND

test.sh

@@ -3,7 +3,7 @@
 set -euo pipefail
 
 project_dir=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)
-kubeconform_image=ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c
+kubeconform_image=ghcr.io/yannh/kubeconform:v0.7.0
 
 sh -n "${project_dir}/install.sh"
 bash -n "${project_dir}/create-ci-kubeconfig.sh"