Pin ubuntu:22.04 to its current manifest digest to ensure reproducible builds and prevent supply-chain mutations. Closes #513 Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>