pin to PRs

Signed-off-by: Jason Hall <jason@chainguard.dev>

go.mod

@@ -4,9 +4,9 @@ go 1.21
 
 toolchain go1.21.1
 
-replace chainguard.dev/apko => ../apko
+replace chainguard.dev/apko => github.com/imjasonh/apko v0.4.1-0.20240111200720-e6e620e081e8
 
-replace github.com/chainguard-dev/go-apk => ../go-apk
+replace github.com/chainguard-dev/go-apk => github.com/imjasonh/go-apk v0.0.0-20240111195710-1e8ff160fb5e
 
 require (
 	chainguard.dev/apko v0.12.0

go.sum

@@ -371,6 +371,10 @@ github.com/ijt/goparsify v0.0.0-20221203142333-3a5276334b8d h1:LFOmpWrSbtolg0YqY
 github.com/ijt/goparsify v0.0.0-20221203142333-3a5276334b8d/go.mod h1:112TOyA+aruNSUBlyBWlKBdLVYTdhjiO2CKD0j/URSU=
 github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=
 github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY=
+github.com/imjasonh/apko v0.4.1-0.20240111200720-e6e620e081e8 h1:WuwKYf6bzW/WSWqTztJHLwPvSfZm/oq3r6IieyCCnqg=
+github.com/imjasonh/apko v0.4.1-0.20240111200720-e6e620e081e8/go.mod h1:y/sH6GIEk8yWg2aE1VsFDx2gFZYir/o4hFIMAPVgQBc=
+github.com/imjasonh/go-apk v0.0.0-20240111195710-1e8ff160fb5e h1:0aasVEiMJP2/yOf5E4rUBzidiPXsvQHKrdFAK5saRYQ=
+github.com/imjasonh/go-apk v0.0.0-20240111195710-1e8ff160fb5e/go.mod h1:jPO/PCGLh7dKE8h0siiNNHMv5tdpamn2e6Sb0CAxhn4=
 github.com/inconshreveable/mousetrap v1.0.0/go.mod h1:PxqpIevigyE2G7u3NXJIT2ANytuPF1OarO4DADm73n8=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=