For security I would like to pin just versions to a specific checksum.