Merge pull request #23 from chainguard-dev/kr/melange-pin-round-two

chore: by 0.31.6 melange image by digest

Author: kranurag7

pre_commit_hooks/shellcheck_run_steps.py

@@ -16,7 +16,8 @@
 # Please provide the output of `grype koalaman/shellcheck@sha256:<newhash>`
 # in your PR when bumping. Referenced by SHA for safety.
 DefaultShellCheckImage = "koalaman/shellcheck@sha256:652a5a714dc2f5f97e36f565d4f7d2322fea376734f3ec1b04ed54ce2a0b124f"
-MelangeImage = "cgr.dev/chainguard/melange:0.31.6"
+# 0.31.6 pinning to resolve var-transforms linting error
+MelangeImage = "cgr.dev/chainguard/melange@sha256:f90bc7ef37f080cd9e0919d8ff96163a57551de515c6e8c7c228157176a0436b"
 
 
 # Returns False if shellcheck reports issues