Skip to content

Commit 1ea582f

Browse files
GingerGeekGingerGeek
committed
Pin all actions to fixed commit hash
1 parent e6aed95 commit 1ea582f

File tree

3 files changed

+24
-24
lines changed

3 files changed

+24
-24
lines changed

‎.github/workflows/docker-hub.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272

7373
- name: Build and push by digest
7474
id: build
75-
uses: docker/build-push-action@v6
75+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
7676
with:
7777
platforms: ${{ matrix.arch.type }}
7878
labels: ${{ steps.meta.outputs.labels }}
@@ -89,7 +89,7 @@ jobs:
8989
touch "${{ runner.temp }}/digests/${digest#sha256:}"
9090
9191
- name: Upload digest
92-
uses: actions/upload-artifact@v4
92+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
9393
with:
9494
name: digests-${{ env.PLATFORM_PAIR }}
9595
path: ${{ runner.temp }}/digests/*
@@ -107,7 +107,7 @@ jobs:
107107
- build-php-images
108108
steps:
109109
- name: Download digests
110-
uses: actions/download-artifact@v4
110+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
111111
with:
112112
path: ${{ runner.temp }}/digests
113113
pattern: digests-php-${{ matrix.php }}-*
@@ -127,7 +127,7 @@ jobs:
127127

128128
- name: Docker meta
129129
id: meta
130-
uses: docker/metadata-action@v5
130+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
131131
with:
132132
images: ${{ vars.DOCKERHUB_PHP_IMAGE }}
133133
tags: |
@@ -181,7 +181,7 @@ jobs:
181181

182182
- name: Build and push by digest
183183
id: build
184-
uses: docker/build-push-action@v6
184+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
185185
with:
186186
platforms: ${{ matrix.arch.type }}
187187
labels: ${{ steps.meta.outputs.labels }}
@@ -199,7 +199,7 @@ jobs:
199199
touch "${{ runner.temp }}/digests/${digest#sha256:}"
200200
201201
- name: Upload digest
202-
uses: actions/upload-artifact@v4
202+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
203203
with:
204204
name: digests-${{ env.PLATFORM_PAIR }}
205205
path: ${{ runner.temp }}/digests/*
@@ -218,7 +218,7 @@ jobs:
218218
- build-cli-images
219219
steps:
220220
- name: Download digests
221-
uses: actions/download-artifact@v4
221+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
222222
with:
223223
path: ${{ runner.temp }}/digests
224224
pattern: digests-cli-${{ matrix.php }}-*
@@ -238,7 +238,7 @@ jobs:
238238

239239
- name: Docker meta
240240
id: meta
241-
uses: docker/metadata-action@v5
241+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
242242
with:
243243
images: ${{ vars.DOCKERHUB_CLI_IMAGE }}
244244
tags: |

‎.github/workflows/github-container-registry.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ jobs:
8282

8383
- name: Build and push by digest
8484
id: build
85-
uses: docker/build-push-action@v6
85+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
8686
with:
8787
platforms: ${{ matrix.arch.type }}
8888
labels: ${{ steps.meta.outputs.labels }}
@@ -99,7 +99,7 @@ jobs:
9999
touch "${{ runner.temp }}/digests/${digest#sha256:}"
100100
101101
- name: Upload digest
102-
uses: actions/upload-artifact@v4
102+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
103103
with:
104104
name: digests-${{ env.PLATFORM_PAIR }}
105105
path: ${{ runner.temp }}/digests/*
@@ -117,7 +117,7 @@ jobs:
117117
- build-php-images
118118
steps:
119119
- name: Download digests
120-
uses: actions/download-artifact@v4
120+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
121121
with:
122122
path: ${{ runner.temp }}/digests
123123
pattern: digests-php-${{ matrix.php }}-*
@@ -138,7 +138,7 @@ jobs:
138138

139139
- name: Docker meta
140140
id: meta
141-
uses: docker/metadata-action@v5
141+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
142142
with:
143143
images: ${{ vars.GHCR_PHP_IMAGE }}
144144
tags: |
@@ -193,7 +193,7 @@ jobs:
193193

194194
- name: Build and push by digest
195195
id: build
196-
uses: docker/build-push-action@v6
196+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
197197
with:
198198
platforms: ${{ matrix.arch.type }}
199199
labels: ${{ steps.meta.outputs.labels }}
@@ -211,7 +211,7 @@ jobs:
211211
touch "${{ runner.temp }}/digests/${digest#sha256:}"
212212
213213
- name: Upload digest
214-
uses: actions/upload-artifact@v4
214+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
215215
with:
216216
name: digests-${{ env.PLATFORM_PAIR }}
217217
path: ${{ runner.temp }}/digests/*
@@ -230,7 +230,7 @@ jobs:
230230
- build-cli-images
231231
steps:
232232
- name: Download digests
233-
uses: actions/download-artifact@v4
233+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
234234
with:
235235
path: ${{ runner.temp }}/digests
236236
pattern: digests-cli-${{ matrix.php }}-*
@@ -251,7 +251,7 @@ jobs:
251251

252252
- name: Docker meta
253253
id: meta
254-
uses: docker/metadata-action@v5
254+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
255255
with:
256256
images: ${{ vars.GHCR_CLI_IMAGE }}
257257
tags: |

‎templates/workflow.yml-template‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@ jobs:
9999

100100
- name: Build and push by digest
101101
id: build
102-
uses: docker/build-push-action@v6
102+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
103103
with:
104104
platforms: ${{ matrix.arch.type }}
105105
labels: ${{ steps.meta.outputs.labels }}
@@ -116,7 +116,7 @@ jobs:
116116
touch "${{ runner.temp }}/digests/${digest#sha256:}"
117117

118118
- name: Upload digest
119-
uses: actions/upload-artifact@v4
119+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
120120
with:
121121
name: digests-${{ env.PLATFORM_PAIR }}
122122
path: ${{ runner.temp }}/digests/*
@@ -134,7 +134,7 @@ jobs:
134134
- build-php-images
135135
steps:
136136
- name: Download digests
137-
uses: actions/download-artifact@v4
137+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
138138
with:
139139
path: ${{ runner.temp }}/digests
140140
pattern: digests-php-${{ matrix.php }}-*
@@ -158,7 +158,7 @@ jobs:
158158

159159
- name: Docker meta
160160
id: meta
161-
uses: docker/metadata-action@v5
161+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
162162
with:
163163
images: %%GITHUB%%${{ vars.GHCR_PHP_IMAGE }}%%/GITHUB%%%%DOCKER_HUB%%${{ vars.DOCKERHUB_PHP_IMAGE }}%%/DOCKER_HUB%%
164164
tags: |
@@ -216,7 +216,7 @@ jobs:
216216

217217
- name: Build and push by digest
218218
id: build
219-
uses: docker/build-push-action@v6
219+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # 6.17.0
220220
with:
221221
platforms: ${{ matrix.arch.type }}
222222
labels: ${{ steps.meta.outputs.labels }}
@@ -234,7 +234,7 @@ jobs:
234234
touch "${{ runner.temp }}/digests/${digest#sha256:}"
235235

236236
- name: Upload digest
237-
uses: actions/upload-artifact@v4
237+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4.6.2
238238
with:
239239
name: digests-${{ env.PLATFORM_PAIR }}
240240
path: ${{ runner.temp }}/digests/*
@@ -253,7 +253,7 @@ jobs:
253253
- build-cli-images
254254
steps:
255255
- name: Download digests
256-
uses: actions/download-artifact@v4
256+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # 4.3.0
257257
with:
258258
path: ${{ runner.temp }}/digests
259259
pattern: digests-cli-${{ matrix.php }}-*
@@ -277,7 +277,7 @@ jobs:
277277

278278
- name: Docker meta
279279
id: meta
280-
uses: docker/metadata-action@v5
280+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # 5.7.0
281281
with:
282282
images: %%GITHUB%%${{ vars.GHCR_CLI_IMAGE }}%%/GITHUB%%%%DOCKER_HUB%%${{ vars.DOCKERHUB_CLI_IMAGE }}%%/DOCKER_HUB%%
283283
tags: |

0 commit comments

Comments
 (0)