Skip to content

Commit 5887c12

Browse files
erinesullivanerinesullivan
authored
Merge pull request #578 from mlibrary/github-actions-sha
Use git SHA for ALL GitHub actions by Wednesday, April 15
2 parents b94b720 + f139c05 commit 5887c12

9 files changed

Lines changed: 25 additions & 25 deletions

‎.github/workflows/build-deploy-on-release.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ on:
77
jobs:
88
build-production:
99
name: Build production ${{ github.event.release.tag_name }}
10-
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-production.yml@v1
10+
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-production.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
1111
with:
1212
image_name: ${{ vars.IMAGE_NAME }}
1313
tag: ${{ github.event.release.tag_name }}
@@ -18,7 +18,7 @@ jobs:
1818
deploy-production:
1919
needs: build-production
2020
name: Deploy to production
21-
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@v1
21+
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
2222
with:
2323
image: ghcr.io/mlibrary/${{ vars.IMAGE_NAME }}:${{ github.event.release.tag_name }}
2424
file: ${{ vars.CONFIG_REPO_PRODUCTION_IMAGE_FILE }}

‎.github/workflows/build-release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,9 @@ jobs:
77
runs-on: ubuntu-latest
88
steps:
99
- name: Checkout code
10-
uses: actions/checkout@v6
10+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1111
- name: Install latest LTS version of Node.js
12-
uses: actions/setup-node@v6
12+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1313
with:
1414
node-version: lts/*
1515
- name: Install dependencies
@@ -26,7 +26,7 @@ jobs:
2626
- name: "Package: Staging"
2727
run: tar -C build --transform s/./search/ -czf search-staging.tar.gz .
2828
- name: "Upload Release Asset: Staging"
29-
uses: softprops/action-gh-release@v2
29+
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
3030
env:
3131
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3232
with:
@@ -43,7 +43,7 @@ jobs:
4343
- name: "Package: Production"
4444
run: tar -C build --transform s/./search/ -czf search-production.tar.gz .
4545
- name: "Upload Release Asset: Production"
46-
uses: softprops/action-gh-release@v2
46+
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
4747
env:
4848
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4949
with:
@@ -60,7 +60,7 @@ jobs:
6060
- name: "Package: Local"
6161
run: tar -C build --transform s/./search/ -czf search-local.tar.gz .
6262
- name: "Upload Release Asset: Local"
63-
uses: softprops/action-gh-release@v2
63+
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
6464
env:
6565
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6666
with:
@@ -75,7 +75,7 @@ jobs:
7575
- name: "Package: Origin"
7676
run: tar -C build --transform s/./search/ -czf search-origin.tar.gz .
7777
- name: "Upload Release Asset: Origin"
78-
uses: softprops/action-gh-release@v2
78+
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
7979
env:
8080
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
8181
with:

‎.github/workflows/build-web.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ on:
88
jobs:
99
build-unstable:
1010
name: Build unstable ${{ github.sha }}
11-
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-unstable.yml@v1
11+
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-unstable.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
1212
with:
1313
image_name: ${{ vars.IMAGE_NAME }}
1414
tag: ${{ github.sha }}
@@ -18,7 +18,7 @@ jobs:
1818
deploy-testing:
1919
needs: build-unstable
2020
name: Deploy to testing
21-
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@v1
21+
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
2222
with:
2323
image: ${{ needs.build-unstable.outputs.image }}
2424
file: ${{ vars.CONFIG_REPO_TESTING_IMAGE_FILE }}

‎.github/workflows/dockerhub-release.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,27 +8,27 @@ jobs:
88
steps:
99

1010
- name: Checkout code
11-
uses: actions/checkout@v6
11+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1212

1313
- name: Get the version
1414
id: tag
1515
run: echo "TAG=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_OUTPUT
1616

1717
- name: Set up QEMU
18-
uses: docker/setup-qemu-action@v4
18+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
1919

2020
- name: Set up Docker Buildx
21-
uses: docker/setup-buildx-action@v4
21+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
2222

2323
- name: Login to DockerHub
24-
uses: docker/login-action@v4
24+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
2525
with:
2626
username: ${{ secrets.DOCKERHUB_USERNAME }}
2727
password: ${{ secrets.DOCKERHUB_TOKEN }}
2828

2929
- name: Build and push
3030
id: docker_build
31-
uses: docker/build-push-action@v7
31+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
3232
with:
3333
push: true
3434
tags: bertrama/search:${{ steps.tag.outputs.TAG }}

‎.github/workflows/dockerhub-unstable.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,13 @@ jobs:
88
if: ${{github.actor != 'dependabot[bot]'}}
99
steps:
1010
- name: Login to DockerHub
11-
uses: docker/login-action@v4
11+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
1212
with:
1313
username: ${{ secrets.DOCKERHUB_USERNAME }}
1414
password: ${{ secrets.DOCKERHUB_TOKEN }}
1515
- name: Build container image and push to DockerHub
1616
id: docker_build
17-
uses: docker/build-push-action@v7
17+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
1818
with:
1919
push: true
2020
tags: 'bertrama/search-unstable:${{ github.sha }},bertrama/search-unstable:latest'

‎.github/workflows/manual-deploy-production.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ on:
1111
jobs:
1212
build-production:
1313
name: Build production ${{ github.event.inputs.tag }}
14-
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-production.yml@v1
14+
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-production.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
1515
with:
1616
image_name: ${{ vars.IMAGE_NAME }}
1717
tag: ${{ github.event.inputs.tag }}
@@ -21,7 +21,7 @@ jobs:
2121
deploy-production:
2222
needs: build-production
2323
name: Deploy to production
24-
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@v1
24+
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
2525
with:
2626
image: ghcr.io/mlibrary/${{ vars.IMAGE_NAME }}:${{ github.event.inputs.tag }}
2727
file: ${{ vars.CONFIG_REPO_PRODUCTION_IMAGE_FILE }}

‎.github/workflows/manual-deploy-testing.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ on:
1010
jobs:
1111
build-unstable:
1212
name: Build unstable ${{ github.event.inputs.tag }}
13-
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-unstable.yml@v1
13+
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-unstable.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
1414
with:
1515
image_name: ${{ vars.IMAGE_NAME }}
1616
tag: ${{ github.event.inputs.tag }}
@@ -20,7 +20,7 @@ jobs:
2020
deploy:
2121
needs: build-unstable
2222
name: Deploy to ${{ github.event.inputs.tanka_env }}
23-
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@v1
23+
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@2012bb6a322ad02c45c01372de2f5e2e3d7329ac # v1.6.7
2424
with:
2525
image: ${{ needs.build-unstable.outputs.image }}
2626
file: ${{ vars.CONFIG_REPO_TESTING_IMAGE_FILE }}

‎.github/workflows/pull-request.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Checkout code
13-
uses: actions/checkout@v6
13+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
with:
1515
fetch-depth: 0
1616
- name: Install latest LTS version of Node.js
17-
uses: actions/setup-node@v6
17+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1818
with:
1919
node-version: lts/*
2020
check-latest: true

‎.github/workflows/update-csl.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,9 @@ jobs:
1010
- name: Construct the target branch name
1111
id: date
1212
run: echo "::set-output name=branch::$(date +'%Y-%m-%d-update-csl-files')"
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
- run: "npm run update:csl"
15-
- uses: gr2m/create-or-update-pull-request-action@v1
15+
- uses: gr2m/create-or-update-pull-request-action@b65137ca591da0b9f43bad7b24df13050ea45d1b # v1.10.1
1616
env:
1717
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
1818
with:

0 commit comments

Comments
 (0)