chore(deps): pin dependencies

bukowa · Jun 10, 2024 · 9d08cf5 · 9d08cf5
1 parent 8a7311a
commit 9d08cf5
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 15 deletions.
diff --git a/.github/workflows/changelog.yaml b/.github/workflows/changelog.yaml
@@ -14,14 +14,14 @@ jobs:
     steps:
 
       -
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
 
       # https://github.com/tj-actions/changed-files/blob/main/README.md#inputs
       -
         name: Detect Changes
-        uses: tj-actions/changed-files@v41.0.0
+        uses: tj-actions/changed-files@cbda684547adc8c052d50711417fa61b428a9f88 # v41.1.2
         id: changes
         with:
           files: |
@@ -38,7 +38,7 @@ jobs:
       # https://github.com/peter-evans/create-pull-request#action-inputs
       -
         name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4
+        uses: peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54 # v4
         with:
           token: "${{ secrets.GITHUB_TOKEN }}"
           branch: "change/${{ github.sha }}"

diff --git a/.github/workflows/pr-docker_test.yaml b/.github/workflows/pr-docker_test.yaml
@@ -15,15 +15,15 @@ jobs:
 
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       -
         name: Set up Docker Build
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
 
       -
         name: Build Docker Test Image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3
         id: build
         with:
           context: .

diff --git a/.github/workflows/tag-docker_test_build_push.yaml b/.github/workflows/tag-docker_test_build_push.yaml
@@ -25,15 +25,15 @@ jobs:
 
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       -
         name: Set up Docker Build
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2
 
       -
         name: Build Docker Test Image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3
         id: build
         with:
           context: .
@@ -48,7 +48,7 @@ jobs:
 
       - name: Get Docker Image Metadata
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175 # v4
         with:
           images: |
             quay.io/k8start/http-headers
@@ -62,23 +62,23 @@ jobs:
 
       - name: Set up QEMU
         id: qemu
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
 
       - name: Login to Docker Hub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_ROBOT_TOKEN }}
 
       - name: Login to GHCR.io Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Login to Quay.io Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
@@ -114,7 +114,7 @@ jobs:
       -
         # Push other images
         name: Build and Push Docker Images
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6 # v3
         id: build-all
         with:
           context: .