Skip to content

Commit 2dab6f5

Browse files
committed
Pin GitHub actions to exact commit IDs
This commit will update GitHub Actions action refs from major version tags to exact commit IDs (SHAs). While this requires more maintenance, it also helps avoid breaking changes and security vulnerabilities.
1 parent 48240d9 commit 2dab6f5

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

.github/workflows/ci.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ jobs:
1111
check:
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v5
14+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
1515
- name: Install mise-en-place
16-
uses: jdx/mise-action@v3
16+
uses: jdx/mise-action@be3be2260bc02bc3fbf94c5e2fed8b7964baf074 # v3.4.0
1717
- name: Run code quality checks
1818
run: mise run check
1919
build:
@@ -23,10 +23,10 @@ jobs:
2323
contents: read
2424
packages: write
2525
steps:
26-
- uses: actions/checkout@v5
26+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2727
- name: Set up metadata
2828
id: meta
29-
uses: docker/metadata-action@v5
29+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
3030
with:
3131
images: ghcr.io/${{ github.repository }}
3232
flavor: |
@@ -35,14 +35,14 @@ jobs:
3535
type=ref,event=branch
3636
type=sha
3737
- name: Log in to GitHub Container Registry (GHCR)
38-
uses: docker/login-action@v3
38+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
3939
if: ${{ github.ref_type == 'tag' || github.ref_name == 'main' }}
4040
with:
4141
registry: ghcr.io
4242
username: ${{ github.repository_owner }}
4343
password: ${{ secrets.GITHUB_TOKEN }}
4444
- name: Build and push container image
45-
uses: docker/build-push-action@v6
45+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 #v6.18.0
4646
with:
4747
context: ./dovi_tool
4848
file: ./dovi_tool/Dockerfile

0 commit comments

Comments
 (0)