pin super-linter when running locally

[zeitlinger]

See #836 (comment)

E.g. we could extract the version from super-linter.yml

[martincostello]

We should be able to just use the renovate syntax to have it update the version if we assign it to a variable:

# renovate: datasource=github-releases depName=super-linter packageName=super-linter/super-linter
$SUPERINTER_VERSION="8.2.1"

$RUNTIME image pull "ghcr.io/super-linter/super-linter:${SUPERINTER_VERSION}"

That wouldn't pin the image, but I'm sure there's a similar command to use the docker data source instead which will also give the SHA.

[mbaykara]

I'd like to take this and fix it.

[zeitlinger]

That wouldn't pin the image, but I'm sure there's a similar command to use the docker data source instead which will also give the SHA.

We could let renovate update this variable - but this updated would pass even if the super linter version causes errors.

Here are the docs: https://docs.renovatebot.com/docker/#digest-pinning