From 78cf6b423c751b79dc32e956892b0ad6e99278d2 Mon Sep 17 00:00:00 2001 From: Julien Doutre <36448022+juliendoutre@users.noreply.github.com> Date: Mon, 16 Mar 2026 14:38:54 +0100 Subject: [PATCH] Pin GitHub Actions --- .github/workflows/datadog-analysis.yaml | 4 ++-- .github/workflows/main-autorelease.yaml | 22 +++++++++++----------- .github/workflows/pr-check.yaml | 16 ++++++++-------- .github/workflows/update-after-fork.yaml | 2 +- 4 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/datadog-analysis.yaml b/.github/workflows/datadog-analysis.yaml index 4b78480..6b5ad0c 100644 --- a/.github/workflows/datadog-analysis.yaml +++ b/.github/workflows/datadog-analysis.yaml @@ -17,7 +17,7 @@ jobs: fi - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 if: env.run_datadog == 'true' - name: Check code meets quality and security standards - pass-api @@ -62,7 +62,7 @@ jobs: fi - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 if: env.run_datadog == 'true' - name: Check imported libraries are secure and compliant - pass-api diff --git a/.github/workflows/main-autorelease.yaml b/.github/workflows/main-autorelease.yaml index 4b544eb..e1e0503 100644 --- a/.github/workflows/main-autorelease.yaml +++ b/.github/workflows/main-autorelease.yaml @@ -28,7 +28,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 # Get the current commit SHA and repository URL (shortened) - name: Get Commit Info @@ -39,7 +39,7 @@ jobs: # Set up Go environment and build/test - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0 with: go-version: '1.22' @@ -51,7 +51,7 @@ jobs: # Run container build - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Log in to the Container registry uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 @@ -95,7 +95,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Get Commit Info id: get_sha @@ -104,7 +104,7 @@ jobs: echo "COMMIT_SHA_FULL=$(git rev-parse HEAD)" >> $GITHUB_ENV - name: Set up Go - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 with: distribution: 'zulu' java-version: '21' @@ -119,7 +119,7 @@ jobs: # Run container build - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Log in to the Container registry uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 @@ -161,7 +161,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 # Get the current commit SHA and repository URL (shortened) - name: Get Commit Info @@ -172,7 +172,7 @@ jobs: # Run container build - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Log in to the Container registry uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 @@ -216,7 +216,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 # Get the current commit SHA and repository URL - name: Get Commit Info @@ -227,7 +227,7 @@ jobs: # Run container build - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Log in to the Container registry uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 @@ -272,7 +272,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: # Checkout all history for all tags and branches # We need this to update the deploy branch diff --git a/.github/workflows/pr-check.yaml b/.github/workflows/pr-check.yaml index c2990f0..bae385a 100644 --- a/.github/workflows/pr-check.yaml +++ b/.github/workflows/pr-check.yaml @@ -18,10 +18,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0 with: go-version: '1.22' @@ -35,10 +35,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Go - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 with: distribution: 'zulu' java-version: '21' @@ -55,10 +55,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Build docker image id: push @@ -79,7 +79,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 # Get the current commit SHA and repository URL (shortened) - name: Get Commit Info @@ -90,7 +90,7 @@ jobs: # Run container build - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Log in to the Container registry uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 diff --git a/.github/workflows/update-after-fork.yaml b/.github/workflows/update-after-fork.yaml index 9fcc6f4..57671e4 100644 --- a/.github/workflows/update-after-fork.yaml +++ b/.github/workflows/update-after-fork.yaml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Replace previous orgname with target orgname run: |