Skip to content

Commit 6c6b587

Browse files
DerekRobertsDerekRoberts
authored
chore(ci): drop allowlisted pins (#534)
1 parent db6e7cf commit 6c6b587

File tree

6 files changed

+41
-43
lines changed

6 files changed

+41
-43
lines changed

‎.github/workflows/.deploy.yml‎

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ on:
88
description: Autoscaling enabled or not for the deployments
99
required: false
1010
type: string
11-
default: 'true'
11+
default: "true"
1212
environment:
1313
description: Environment name; omit for PRs
1414
required: false
@@ -50,16 +50,14 @@ on:
5050
required: false
5151
type: string
5252

53-
5453
jobs:
55-
5654
deploys:
5755
name: Helm
5856
environment: ${{ inputs.environment }}
5957
runs-on: ubuntu-24.04
6058
timeout-minutes: ${{ inputs.timeout-minutes }}
6159
steps:
62-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
60+
- uses: actions/checkout@v5
6361
- name: Stop pre-existing deployments on PRs (status = pending-upgrade)
6462
if: github.event_name == 'pull_request'
6563
uses: bcgov/action-oc-runner@f900830adadd4d9eef3ca6ff80103e839ba8b7c0 # v1.3.0

‎.github/workflows/.tests.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,14 +17,14 @@ jobs:
1717
matrix:
1818
browser: [chrome]
1919
steps:
20-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
20+
- uses: actions/checkout@v5
2121
- uses: cypress-io/github-action@v5
2222
name: Cypress run
2323
with:
2424
config: pageLoadTimeout=30000,baseUrl=https://pubcode-${{ inputs.target }}.apps.silver.devops.gov.bc.ca/
2525
working-directory: ./frontend
2626
browser: ${{ matrix.browser }}
27-
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
27+
- uses: actions/upload-artifact@v4
2828
if: failure()
2929
with:
3030
name: cypress-screenshots

‎.github/workflows/analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,10 @@ jobs:
2121
if: github.event_name != 'pull_request' || !github.event.pull_request.draft
2222
runs-on: ubuntu-24.04
2323
steps:
24-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
24+
- uses: actions/checkout@v5
2525

2626
- name: Run Trivy vulnerability scanner in repo mode
27-
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
27+
uses: aquasecurity/[email protected]
2828
with:
2929
format: "sarif"
3030
output: "trivy-results.sarif"
@@ -34,6 +34,6 @@ jobs:
3434
severity: "CRITICAL,HIGH"
3535

3636
- name: Upload Trivy scan results to GitHub Security tab
37-
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4
37+
uses: github/codeql-action/upload-sarif@v4
3838
with:
3939
sarif_file: "trivy-results.sarif"

‎.github/workflows/merge.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -19,24 +19,24 @@ jobs:
1919
runs-on: ubuntu-24.04
2020
timeout-minutes: 1
2121
steps:
22-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
22+
- uses: actions/checkout@v5
2323
- name: Conventional Changelog Update
2424
uses: TriPSs/conventional-changelog-action@84dadaf2c367cb52af02737cd9c7e888807219e7 # v6.2.0
2525
id: changelog
2626
with:
2727
github-token: ${{ github.token }}
28-
output-file: 'CHANGELOG.md'
29-
skip-version-file: 'true'
30-
skip-commit: 'true'
31-
skip-on-empty: 'false'
32-
git-push: 'true'
28+
output-file: "CHANGELOG.md"
29+
skip-version-file: "true"
30+
skip-commit: "true"
31+
skip-on-empty: "false"
32+
git-push: "true"
3333

3434
retag-images:
35-
needs: [ semantic-version ]
35+
needs: [semantic-version]
3636
runs-on: ubuntu-24.04
3737
strategy:
3838
matrix:
39-
package: [ api, database, frontend ]
39+
package: [api, database, frontend]
4040
steps:
4141
- name: Tag Docker Images
4242
uses: shrink/actions-docker-registry-tag@f04afd0559f66b288586792eb150f45136a927fa # v4
@@ -77,7 +77,7 @@ jobs:
7777
tag: ${{ needs.semantic-version.outputs.semanticVersion }}
7878
release_name: pubcode
7979
params: --set-string api.containers[0].tag="${{ needs.semantic-version.outputs.tag }}" --set-string frontend.containers[0].tag="${{ needs.semantic-version.outputs.tag }}"
80-
github_release:
80+
github_release:
8181
name: Create Release
8282
needs: [semantic-version, deploys-prod]
8383
runs-on: ubuntu-24.04

‎.github/workflows/pr-open.yml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
matrix:
4747
package: [api, frontend]
4848
steps:
49-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
49+
- uses: actions/checkout@v5
5050
- uses: bcgov/action-builder-ghcr@1e4295b9766963ca36612b78560db6235120b80f # 4.1.1
5151
with:
5252
package: ${{ matrix.package }}
@@ -71,19 +71,19 @@ jobs:
7171
tag: ${{ github.event.number }}
7272
release_name: pubcode-${{ github.event.number }}
7373
params: |
74-
--set-string global.repository=${{ github.repository }} \
75-
--set-string api.containers[0].tag="${{ github.sha }}" \
76-
--set-string api.containers[0].resources.requests.cpu="30m" \
77-
--set-string api.containers[0].resources.requests.memory="50Mi" \
78-
--set-string frontend.containers[0].tag="${{ github.sha }}" \
79-
--set-string frontend.containers[0].resources.requests.cpu="30m" \
80-
--set-string frontend.containers[0].resources.requests.memory="50Mi" \
81-
--set-string database.containers[0].resources.requests.cpu="30m" \
82-
--set-string database.containers[0].resources.requests.memory="50Mi" \
83-
--set-string database.initContainers[0].resources.requests.cpu="30m" \
84-
--set-string database.initContainers[0].resources.requests.memory="50Mi" \
85-
--set-string database.pvc.size="350Mi" \
86-
--set-string global.env.VITE_SCHEMA_BRANCH=${{ github.event.pull_request.head.ref }} \
74+
--set-string global.repository=${{ github.repository }} \
75+
--set-string api.containers[0].tag="${{ github.sha }}" \
76+
--set-string api.containers[0].resources.requests.cpu="30m" \
77+
--set-string api.containers[0].resources.requests.memory="50Mi" \
78+
--set-string frontend.containers[0].tag="${{ github.sha }}" \
79+
--set-string frontend.containers[0].resources.requests.cpu="30m" \
80+
--set-string frontend.containers[0].resources.requests.memory="50Mi" \
81+
--set-string database.containers[0].resources.requests.cpu="30m" \
82+
--set-string database.containers[0].resources.requests.memory="50Mi" \
83+
--set-string database.initContainers[0].resources.requests.cpu="30m" \
84+
--set-string database.initContainers[0].resources.requests.memory="50Mi" \
85+
--set-string database.pvc.size="350Mi" \
86+
--set-string global.env.VITE_SCHEMA_BRANCH=${{ github.event.pull_request.head.ref }} \
8787
8888
tests:
8989
name: Tests

‎.github/workflows/scheduled.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,23 +23,23 @@ jobs:
2323
working-directory: crawler
2424
steps:
2525
- name: Check out repository
26-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
26+
uses: actions/checkout@v5
2727

2828
- name: Add Node.js
29-
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
29+
uses: actions/setup-node@v6
3030
with:
3131
node-version: "22.x"
3232
- name: Install Dependencies
3333
run: npm ci
3434

35-
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
35+
- uses: actions/cache@v4
3636
with:
3737
path: ~/.npm
3838
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
3939
restore-keys: |
4040
${{ runner.os }}-node-
4141
42-
- uses: redhat-actions/openshift-tools-installer@144527c7d98999f2652264c048c7a9bd103f8a82 # v1
42+
- uses: redhat-actions/openshift-tools-installer@v1
4343
with:
4444
oc: "4"
4545

@@ -64,17 +64,17 @@ jobs:
6464
working-directory: schema/script
6565
steps:
6666
- name: Check out repository
67-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
67+
uses: actions/checkout@v5
6868

6969
- name: Add Node.js
70-
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
70+
uses: actions/setup-node@v6
7171
with:
7272
node-version: "22.x"
7373

7474
- name: Install Dependencies
7575
run: npm ci
7676

77-
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
77+
- uses: actions/cache@v4
7878
with:
7979
path: ~/.npm
8080
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -107,23 +107,23 @@ jobs:
107107
environment: prod
108108
steps:
109109
- name: Check out repository
110-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
110+
uses: actions/checkout@v5
111111

112112
- name: Add Node.js
113-
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
113+
uses: actions/setup-node@v6
114114
with:
115115
node-version: "22.x"
116116
- name: Install Dependencies
117117
run: npm ci
118118

119-
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
119+
- uses: actions/cache@v4
120120
with:
121121
path: ~/.npm
122122
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
123123
restore-keys: |
124124
${{ runner.os }}-node-
125125
126-
- uses: redhat-actions/openshift-tools-installer@144527c7d98999f2652264c048c7a9bd103f8a82 # v1
126+
- uses: redhat-actions/openshift-tools-installer@v1
127127
with:
128128
oc: "4"
129129

0 commit comments

Comments
 (0)