@@ -28,11 +28,11 @@ jobs:
2828 - name : Get GitHub organization or user
2929 run : echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV
3030 - name : Set up QEMU
31- uses : docker/setup-qemu-action@v3
31+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
3232 with :
3333 image : tonistiigi/binfmt:qemu-v7.0.0
3434 - name : Set up Docker Buildx
35- uses : docker/setup-buildx-action@v3
35+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
3636 - name : Copy Dockerfile
3737 run : cp Dockerfile Dockerfile.ubuntu-${{ matrix.release }}; sed -i.bak "s/FROM.*/FROM ${ORG}\/github-runner-base:ubuntu-${{ matrix.release }}/" Dockerfile.ubuntu-${{ matrix.release }}
3838 - name : Install Goss and dgoss
@@ -46,12 +46,12 @@ jobs:
4646 id : testvars
4747 run : echo "GH_RUNNER_IMAGE=ubuntu-${{ matrix.release }}-${{ env.GIT_SHA }}-${{ matrix.platform }}" >> $GITHUB_ENV
4848 - name : Login to DockerHub
49- uses : docker/login-action@v3
49+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
5050 with :
5151 username : ${{ secrets.DOCKER_USER }}
5252 password : ${{ secrets.DOCKER_TOKEN }}
5353 - name : Retry build and load
54- uses : nick-fields/retry@v3
54+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
5555 with :
5656 timeout_minutes : 60
5757 max_attempts : 3
6767 .
6868 # Tests will run against the final `${GH_RUNNER_IMAGE}` laid on top of `base-${GH_RUNNER_IMAGE}`
6969 - name : Run goss tests
70- uses : nick-fields/retry@v3
70+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
7171 with :
7272 timeout_minutes : 60
7373 max_attempts : 3
@@ -140,11 +140,11 @@ jobs:
140140 - name : Get GitHub organization or user
141141 run : echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV
142142 - name : Set up QEMU
143- uses : docker/setup-qemu-action@v3
143+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
144144 with :
145145 image : tonistiigi/binfmt:qemu-v7.0.0
146146 - name : Set up Docker Buildx
147- uses : docker/setup-buildx-action@v3
147+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
148148 - name : Copy Dockerfile
149149 run : cp Dockerfile Dockerfile.debian-${{ matrix.release }}; sed -i.bak "s/FROM.*/FROM ${ORG}\/github-runner-base:debian-${{ matrix.release }}/" Dockerfile.debian-${{ matrix.release }}
150150 - name : Install Goss and dgoss
@@ -158,12 +158,12 @@ jobs:
158158 id : testvars
159159 run : echo "GH_RUNNER_IMAGE=debian-${{ matrix.release }}-${{ env.GIT_SHA }}-${{ matrix.platform }}" >> $GITHUB_ENV
160160 - name : Login to DockerHub
161- uses : docker/login-action@v3
161+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
162162 with :
163163 username : ${{ secrets.DOCKER_USER }}
164164 password : ${{ secrets.DOCKER_TOKEN }}
165165 - name : Retry build and load
166- uses : nick-fields/retry@v3
166+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
167167 with :
168168 timeout_minutes : 60
169169 max_attempts : 3
@@ -179,7 +179,7 @@ jobs:
179179 .
180180 # Tests will run against the final `${GH_RUNNER_IMAGE}` laid on top of `base-${GH_RUNNER_IMAGE}`
181181 - name : Run goss tests
182- uses : nick-fields/retry@v3
182+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
183183 with :
184184 timeout_minutes : 60
185185 max_attempts : 3
@@ -239,26 +239,26 @@ jobs:
239239 - name : Get GitHub organization or user
240240 run : echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV
241241 - name : Set up QEMU
242- uses : docker/setup-qemu-action@v3
242+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
243243 with :
244244 image : tonistiigi/binfmt:qemu-v7.0.0
245245 - name : Set up Docker Buildx
246- uses : docker/setup-buildx-action@v3
246+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
247247 - name : Update Dockerfile FROM org
248248 run : sed -i.bak "s/FROM.*/FROM ${ORG}\/github-runner-base:latest/" Dockerfile
249249 - name : Login to DockerHub
250- uses : docker/login-action@v3
250+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
251251 with :
252252 username : ${{ secrets.DOCKER_USER }}
253253 password : ${{ secrets.DOCKER_TOKEN }}
254254 - name : Login to GitHub Container Registry
255- uses : docker/login-action@v3
255+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
256256 with :
257257 registry : ghcr.io
258258 username : ${{ github.actor }}
259259 password : ${{ secrets.GITHUB_TOKEN }}
260260 - name : Retry build and push
261- uses : nick-fields/retry@v3
261+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
262262 with :
263263 timeout_minutes : 60
264264 max_attempts : 3
@@ -287,26 +287,26 @@ jobs:
287287 - name : Get GitHub organization or user
288288 run : echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV
289289 - name : Set up QEMU
290- uses : docker/setup-qemu-action@v3
290+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
291291 with :
292292 image : tonistiigi/binfmt:qemu-v7.0.0
293293 - name : Set up Docker Buildx
294- uses : docker/setup-buildx-action@v3
294+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
295295 - name : Copy Dockerfile
296296 run : cp Dockerfile Dockerfile.ubuntu-${{ matrix.release }}; sed -i.bak "s/FROM.*/FROM ${ORG}\/github-runner-base:ubuntu-${{ matrix.release }}/" Dockerfile.ubuntu-${{ matrix.release }}
297297 - name : Login to DockerHub
298- uses : docker/login-action@v3
298+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
299299 with :
300300 username : ${{ secrets.DOCKER_USER }}
301301 password : ${{ secrets.DOCKER_TOKEN }}
302302 - name : Login to GitHub Container Registry
303- uses : docker/login-action@v3
303+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
304304 with :
305305 registry : ghcr.io
306306 username : ${{ github.actor }}
307307 password : ${{ secrets.GITHUB_TOKEN }}
308308 - name : Retry build and push
309- uses : nick-fields/retry@v3
309+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
310310 with :
311311 timeout_minutes : 60
312312 max_attempts : 3
@@ -335,26 +335,26 @@ jobs:
335335 - name : Get GitHub organization or user
336336 run : echo 'ORG='$(echo $(dirname ${GITHUB_REPOSITORY}) | awk '{print tolower($0)}') >> $GITHUB_ENV
337337 - name : Set up QEMU
338- uses : docker/setup-qemu-action@v3
338+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
339339 with :
340340 image : tonistiigi/binfmt:qemu-v7.0.0
341341 - name : Set up Docker Buildx
342- uses : docker/setup-buildx-action@v3
342+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3
343343 - name : Copy Dockerfile
344344 run : cp Dockerfile Dockerfile.debian-${{ matrix.release }}; sed -i.bak "s/FROM.*/FROM ${ORG}\/github-runner-base:debian-${{ matrix.release }}/" Dockerfile.debian-${{ matrix.release }}
345345 - name : Login to DockerHub
346- uses : docker/login-action@v3
346+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
347347 with :
348348 username : ${{ secrets.DOCKER_USER }}
349349 password : ${{ secrets.DOCKER_TOKEN }}
350350 - name : Login to GitHub Container Registry
351- uses : docker/login-action@v3
351+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
352352 with :
353353 registry : ghcr.io
354354 username : ${{ github.actor }}
355355 password : ${{ secrets.GITHUB_TOKEN }}
356356 - name : Retry build and push
357- uses : nick-fields/retry@v3
357+ uses : nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3
358358 with :
359359 timeout_minutes : 60
360360 max_attempts : 3
0 commit comments