Lock mutable image tags to current running digests

Lock mutable image tags to current running digests

apps/immich/docker-compose.yml

@@ -3,7 +3,7 @@ version: "3.9"
 services:
   immich-server:
     container_name: immich_server
-    image: ghcr.io/immich-app/immich-server:release
+    image: ghcr.io/immich-app/immich-server:release@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
     restart: unless-stopped
     depends_on:
       - redis
@@ -34,7 +34,7 @@ services:
 
   immich-machine-learning:
     container_name: immich_machine_learning
-    image: ghcr.io/immich-app/immich-machine-learning:release
+    image: ghcr.io/immich-app/immich-machine-learning:release@sha256:a2501141440f10516d329fdfba2c68082e19eb9ba6016c061ac80d23beadf7f3
     restart: unless-stopped
     volumes:
       - model-cache:/cache
@@ -77,4 +77,4 @@ networks:
     internal: true
     driver: bridge
   frontend_net:
-    external: true
+    external: true