Skip to content

Commit db52916

Browse files
apostasieapostasie
committed
Switch github actions to commit sha
Signed-off-by: apostasie <[email protected]>
1 parent 0c0737d commit db52916

File tree

7 files changed

+41
-41
lines changed

7 files changed

+41
-41
lines changed

‎.github/workflows/ghcr-image-build-and-publish.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -31,19 +31,19 @@ jobs:
3131

3232
steps:
3333
- name: Checkout repository
34-
uses: actions/[email protected]
34+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3535

3636
- name: Set up QEMU
37-
uses: docker/setup-qemu-action@v3
37+
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
3838

3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@v3
40+
uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
4141

4242
# Login against a Docker registry except on PR
4343
# https://github.com/docker/login-action
4444
- name: Log into registry ${{ env.REGISTRY }}
4545
if: github.event_name != 'pull_request'
46-
uses: docker/[email protected]
46+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
4747
with:
4848
registry: ${{ env.REGISTRY }}
4949
username: ${{ github.actor }}
@@ -53,14 +53,14 @@ jobs:
5353
# https://github.com/docker/metadata-action
5454
- name: Extract Docker metadata
5555
id: meta
56-
uses: docker/[email protected]
56+
uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5.6.1
5757
with:
5858
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
5959

6060
# Build and push Docker image with Buildx (don't push on PR)
6161
# https://github.com/docker/build-push-action
6262
- name: Build and push Docker image
63-
uses: docker/[email protected]
63+
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
6464
with:
6565
context: .
6666
platforms: linux/amd64,linux/arm64

‎.github/workflows/lint.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
env:
3737
GOOS: "${{ matrix.goos }}"
3838
steps:
39-
- uses: actions/[email protected]
39+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4040
with:
4141
fetch-depth: 1
4242
- name: Set GO env
@@ -46,24 +46,24 @@ jobs:
4646
. ./hack/build-integration-canary.sh
4747
canary::golang::latest
4848
fi
49-
- uses: actions/setup-go@v5
49+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
5050
with:
5151
go-version: ${{ env.GO_VERSION }}
5252
check-latest: true
5353
cache: true
5454
- name: golangci-lint
55-
uses: golangci/golangci-lint-action@v6
55+
uses: golangci/golangci-lint-action@774c35bcccffb734694af9e921f12f57d882ef74 # v6.1.1
5656
with:
5757
args: --verbose
5858
other:
5959
timeout-minutes: 5
6060
name: yaml | shell | imports order
6161
runs-on: ubuntu-24.04
6262
steps:
63-
- uses: actions/[email protected]
63+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6464
with:
6565
fetch-depth: 1
66-
- uses: actions/setup-go@v5
66+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
6767
with:
6868
go-version: ${{ env.GO_VERSION }}
6969
check-latest: true

‎.github/workflows/project.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,15 +13,15 @@ jobs:
1313
runs-on: ubuntu-24.04
1414
timeout-minutes: 20
1515
steps:
16-
- uses: actions/[email protected]
16+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1717
with:
1818
path: src/github.com/containerd/nerdctl
1919
fetch-depth: 100
20-
- uses: actions/setup-go@v5
20+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
2121
with:
2222
go-version: ${{ env.GO_VERSION }}
2323
cache-dependency-path: src/github.com/containerd/nerdctl
24-
- uses: containerd/[email protected]
24+
- uses: containerd/project-checks@434a07157608eeaa1d5c8d4dd506154204cd9401 # v1.1.0
2525
with:
2626
working-directory: src/github.com/containerd/nerdctl
2727
repo-access-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ jobs:
1010
runs-on: ubuntu-24.04
1111
timeout-minutes: 40
1212
steps:
13-
- uses: actions/[email protected]
14-
- uses: actions/setup-go@v5
13+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
14+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
1515
with:
1616
go-version: 1.23.x
1717
- name: "Compile binaries"

‎.github/workflows/test-canary.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
runs-on: "ubuntu-24.04"
2020
timeout-minutes: 40
2121
steps:
22-
- uses: actions/[email protected]
22+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2323
with:
2424
fetch-depth: 1
2525
- name: "Prepare integration test environment"
@@ -55,7 +55,7 @@ jobs:
5555
run:
5656
shell: bash
5757
steps:
58-
- uses: actions/[email protected]
58+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5959
with:
6060
fetch-depth: 1
6161
- name: Set GO env
@@ -70,7 +70,7 @@ jobs:
7070
7171
. ./hack/build-integration-canary.sh
7272
canary::golang::latest
73-
- uses: actions/setup-go@v5
73+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
7474
with:
7575
go-version: ${{ env.GO_VERSION }}
7676
cache: true
@@ -79,7 +79,7 @@ jobs:
7979
- run: go install -v gotest.tools/gotestsum@v1
8080
# This here is solely to get the cni install script, which has not been modified in 3+ years.
8181
# There is little to no reason to update this to latest containerd
82-
- uses: actions/[email protected]
82+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8383
with:
8484
repository: containerd/containerd
8585
ref: "v1.7.24"

‎.github/workflows/test-kube.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
env:
1818
ROOTFUL: true
1919
steps:
20-
- uses: actions/[email protected]
20+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2121
with:
2222
fetch-depth: 1
2323
- name: "Run Kubernetes integration tests"

‎.github/workflows/test.yml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,11 @@ jobs:
4040
CONTAINERD_VERSION: "${{ matrix.containerd }}"
4141
ARCH: "${{ matrix.arch }}"
4242
steps:
43-
- uses: actions/[email protected]
43+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4444
with:
4545
fetch-depth: 1
4646
- name: "Expose GitHub Runtime variables for gha"
47-
uses: crazy-max/ghaction-github-runtime@v3
47+
uses: crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0.0
4848
- name: "Build dependencies for the integration test environment image"
4949
run: |
5050
docker buildx create --name with-gha --use
@@ -73,16 +73,16 @@ jobs:
7373
- os: ubuntu-24.04
7474
goos: linux
7575
steps:
76-
- uses: actions/[email protected]
76+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7777
with:
7878
fetch-depth: 1
79-
- uses: actions/setup-go@v5
79+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
8080
with:
8181
go-version: ${{ env.GO_VERSION }}
8282
check-latest: true
8383
cache: true
8484
- if: ${{ matrix.goos=='windows' }}
85-
uses: actions/[email protected]
85+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8686
with:
8787
repository: containerd/containerd
8888
ref: v1.7.24
@@ -126,11 +126,11 @@ jobs:
126126
ARCH: "${{ matrix.arch }}"
127127
UBUNTU_VERSION: "${{ matrix.ubuntu }}"
128128
steps:
129-
- uses: actions/[email protected]
129+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
130130
with:
131131
fetch-depth: 1
132132
- name: "Expose GitHub Runtime variables for gha"
133-
uses: crazy-max/ghaction-github-runtime@v3
133+
uses: crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0.0
134134
- name: "Prepare integration test environment"
135135
run: |
136136
docker buildx create --name with-gha --use
@@ -175,15 +175,15 @@ jobs:
175175
ARCH: "${{ matrix.arch }}"
176176
UBUNTU_VERSION: "${{ matrix.ubuntu }}"
177177
steps:
178-
- uses: actions/[email protected]
178+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
179179
with:
180180
fetch-depth: 1
181181
- name: Enable ipv4 and ipv6 forwarding
182182
run: |
183183
sudo sysctl -w net.ipv6.conf.all.forwarding=1
184184
sudo sysctl -w net.ipv4.ip_forward=1
185185
- name: "Expose GitHub Runtime variables for gha"
186-
uses: crazy-max/ghaction-github-runtime@v3
186+
uses: crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0.0
187187
- name: Enable IPv6 for Docker, and configure docker to use containerd for gha
188188
run: |
189189
sudo mkdir -p /etc/docker
@@ -271,7 +271,7 @@ jobs:
271271
}
272272
EOT
273273
sudo systemctl restart apparmor.service
274-
- uses: actions/[email protected]
274+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
275275
with:
276276
fetch-depth: 1
277277
- name: "Register QEMU (tonistiigi/binfmt)"
@@ -284,7 +284,7 @@ jobs:
284284
docker run --privileged --rm tonistiigi/binfmt --install linux/arm64
285285
docker run --privileged --rm tonistiigi/binfmt --install linux/arm/v7
286286
- name: "Expose GitHub Runtime variables for gha"
287-
uses: crazy-max/ghaction-github-runtime@v3
287+
uses: crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0.0
288288
- name: "Prepare (network driver=slirp4netns, port driver=builtin)"
289289
run: |
290290
docker buildx create --name with-gha --use
@@ -313,10 +313,10 @@ jobs:
313313
matrix:
314314
go-version: ["1.22.x", "1.23.x"]
315315
steps:
316-
- uses: actions/[email protected]
316+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
317317
with:
318318
fetch-depth: 1
319-
- uses: actions/setup-go@v5
319+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
320320
with:
321321
go-version: ${{ matrix.go-version }}
322322
cache: true
@@ -329,10 +329,10 @@ jobs:
329329
name: docker
330330
runs-on: ubuntu-24.04
331331
steps:
332-
- uses: actions/[email protected]
332+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
333333
with:
334334
fetch-depth: 1
335-
- uses: actions/setup-go@v5
335+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
336336
with:
337337
go-version: ${{ env.GO_VERSION }}
338338
cache: true
@@ -365,17 +365,17 @@ jobs:
365365
run:
366366
shell: bash
367367
steps:
368-
- uses: actions/[email protected]
368+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
369369
with:
370370
fetch-depth: 1
371-
- uses: actions/setup-go@v5
371+
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
372372
with:
373373
go-version: ${{ env.GO_VERSION }}
374374
cache: true
375375
check-latest: true
376376
- run: go install ./cmd/nerdctl
377377
- run: go install -v gotest.tools/gotestsum@v1
378-
- uses: actions/[email protected]
378+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
379379
with:
380380
repository: containerd/containerd
381381
ref: v1.7.24
@@ -399,10 +399,10 @@ jobs:
399399
# ubuntu-24.04 lacks the vagrant package
400400
runs-on: ubuntu-22.04
401401
steps:
402-
- uses: actions/[email protected]
402+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
403403
with:
404404
fetch-depth: 1
405-
- uses: actions/cache@v4
405+
- uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
406406
with:
407407
path: /root/.vagrant.d
408408
key: vagrant-${{ matrix.box }}

0 commit comments

Comments
 (0)