Skip to content

Commit 3d544bb

Browse files
sudo-krakensudo-kraken
committed
ci: updated all workflows to be pineed to commit hashes ahead of renovate connection
1 parent 0af453e commit 3d544bb

File tree

13 files changed

+80
-80
lines changed

13 files changed

+80
-80
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -26,20 +26,20 @@ jobs:
2626
container: node:22-alpine
2727
steps:
2828
- name: Checkout
29-
uses: actions/checkout@v4
29+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3030
with:
3131
persist-credentials: false
3232

3333
- name: Pnpm Setup
34-
uses: pnpm/action-setup@v4
34+
uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
3535

3636
- name: Get pnpm store directory
3737
shell: sh
3838
run: |
3939
echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
4040
4141
- name: Setup pnpm cache
42-
uses: actions/cache@v4
42+
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
4343
with:
4444
path: ${{ env.STORE_PATH }}
4545
key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -75,7 +75,7 @@ jobs:
7575
runs-on: ${{ matrix.runner }}
7676
steps:
7777
- name: Checkout
78-
uses: actions/checkout@v4
78+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7979
with:
8080
persist-credentials: false
8181

@@ -84,10 +84,10 @@ jobs:
8484
run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> "$GITHUB_OUTPUT"
8585

8686
- name: Set up Docker Buildx
87-
uses: docker/setup-buildx-action@v3
87+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
8888

8989
- name: Warm cache (no push) — ${{ matrix.platform }}
90-
uses: docker/build-push-action@v6
90+
uses: docker/build-push-action@c382f710d39a5bb4e430307530a720f50c2d3318 # v6.0.0
9191
with:
9292
context: .
9393
file: ./Dockerfile
@@ -111,7 +111,7 @@ jobs:
111111
id-token: write
112112
steps:
113113
- name: Checkout
114-
uses: actions/checkout@v4
114+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
115115
with:
116116
persist-credentials: false
117117

@@ -120,24 +120,24 @@ jobs:
120120
run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> "$GITHUB_OUTPUT"
121121

122122
- name: Set up Docker Buildx
123-
uses: docker/setup-buildx-action@v3
123+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
124124

125125
- name: Log in to Docker Hub
126-
uses: docker/login-action@v3
126+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
127127
with:
128128
username: ${{ secrets.DOCKER_USERNAME }}
129129
password: ${{ secrets.DOCKER_TOKEN }}
130130

131131
- name: Log in to GitHub Container Registry
132-
uses: docker/login-action@v3
132+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
133133
with:
134134
registry: ghcr.io
135135
username: ${{ github.repository_owner }}
136136
password: ${{ secrets.GITHUB_TOKEN }}
137137

138138
- name: Extract metadata
139139
id: meta
140-
uses: docker/metadata-action@v5
140+
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
141141
with:
142142
images: |
143143
${{ github.repository }}
@@ -149,7 +149,7 @@ jobs:
149149
org.opencontainers.image.created=${{ steps.ts.outputs.TIMESTAMP }}
150150
151151
- name: Build & Push (multi-arch, single tag)
152-
uses: docker/build-push-action@v6
152+
uses: docker/build-push-action@c382f710d39a5bb4e430307530a720f50c2d3318 # v6.0.0
153153
with:
154154
context: .
155155
file: ./Dockerfile
@@ -184,7 +184,7 @@ jobs:
184184
fi
185185
186186
- name: Post Status to Discord
187-
uses: sarisia/actions-status-discord@v1
187+
uses: sarisia/actions-status-discord@58667542682a27f270460405363e3a982f57a7ee # v1.0.0
188188
with:
189189
webhook: ${{ secrets.DISCORD_WEBHOOK }}
190190
status: ${{ steps.status.outputs.status }}

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,20 +37,20 @@ jobs:
3737
language: [actions, javascript]
3838
steps:
3939
- name: Checkout
40-
uses: actions/checkout@v4
40+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4141
with:
4242
persist-credentials: false
4343

4444
- name: Initialize CodeQL
45-
uses: github/codeql-action/init@v3
45+
uses: github/codeql-action/init@b374143c1149a9115d881581d29b8390bbcbb59c # v3.22.11
4646
with:
4747
languages: ${{ matrix.language }}
4848
queries: +security-and-quality
4949

5050
- name: Autobuild
51-
uses: github/codeql-action/autobuild@v3
51+
uses: github/codeql-action/autobuild@b374143c1149a9115d881581d29b8390bbcbb59c # v3.22.11
5252

5353
- name: Perform CodeQL Analysis
54-
uses: github/codeql-action/analyze@v3
54+
uses: github/codeql-action/analyze@b374143c1149a9115d881581d29b8390bbcbb59c # v3.22.11
5555
with:
5656
category: '/language:${{ matrix.language }}'

‎.github/workflows/conflict_labeler.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
pull-requests: write
2828
steps:
2929
- name: Apply label
30-
uses: eps1lon/actions-label-merge-conflict@v3
30+
uses: eps1lon/actions-label-merge-conflict@ve62d7a53ff8be8b97684bffb6cfbbf3fc1115e2e # v3.0.0
3131
with:
3232
dirtyLabel: 'merge conflict'
3333
commentOnDirty: 'This pull request has merge conflicts. Please resolve the conflicts so the PR can be successfully reviewed and merged.'

‎.github/workflows/cypress.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -37,23 +37,23 @@ jobs:
3737
runs-on: ubuntu-24.04
3838
steps:
3939
- name: Checkout
40-
uses: actions/checkout@v4
40+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4141
with:
4242
persist-credentials: false
4343

4444
- name: Set up Node.js
45-
uses: actions/setup-node@v4
45+
uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
4646
with:
4747
node-version-file: package.json
4848

4949
- name: Pnpm Setup
50-
uses: pnpm/action-setup@v4
50+
uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
5151

5252
- name: Install dependencies
5353
run: pnpm install --frozen-lockfile
5454

5555
- name: Setup cypress cache
56-
uses: actions/cache@v4
56+
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
5757
with:
5858
path: ~/.cache/Cypress
5959
key: ${{ runner.os }}-cypress-store-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -66,7 +66,7 @@ jobs:
6666
run: pnpm exec cypress install
6767

6868
- name: Cypress run
69-
uses: cypress-io/github-action@v6
69+
uses: cypress-io/github-action@a55856e0e961f64708c68ddcb38fba233d164ed8 # v6.0.0
7070
with:
7171
install: false
7272
build: pnpm cypress:build

‎.github/workflows/docs-deploy.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,26 +22,26 @@ jobs:
2222
name: Build Docusaurus
2323
runs-on: ubuntu-24.04
2424
steps:
25-
- uses: actions/checkout@v4
25+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2626
with:
2727
fetch-depth: 0
2828
persist-credentials: false
2929

3030
- name: Set up Node.js
31-
uses: actions/setup-node@v4
31+
uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
3232
with:
3333
node-version-file: package.json
3434

3535
- name: Pnpm Setup
36-
uses: pnpm/action-setup@v4
36+
uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
3737

3838
- name: Get pnpm store directory
3939
shell: sh
4040
run: |
4141
echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
4242
4343
- name: Setup pnpm cache
44-
uses: actions/cache@v4
44+
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
4545
with:
4646
path: ${{ env.STORE_PATH }}
4747
key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -58,7 +58,7 @@ jobs:
5858
run: pnpm build
5959

6060
- name: Upload Build Artifact
61-
uses: actions/upload-pages-artifact@v4
61+
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b6 # v4.0.0
6262
with:
6363
path: gen-docs/build
6464

@@ -76,4 +76,4 @@ jobs:
7676
steps:
7777
- name: Deploy to GitHub Pages
7878
id: deployment
79-
uses: actions/deploy-pages@v4
79+
uses: actions/deploy-pagesf33f41b675f0ab2dc5a6863c9a170fe83af3571e # v4.0.0

‎.github/workflows/docs-link-check.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,13 +36,13 @@ jobs:
3636

3737
steps:
3838
- name: Checkout
39-
uses: actions/checkout@v4
39+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4040
with:
4141
fetch-depth: 0
4242
persist-credentials: false
4343

4444
- name: Run Lychee link checker
45-
uses: lycheeverse/lychee-action@v2
45+
uses: lycheeverse/lychee-action@7da8ec1fc4e01b5a12062ac6c589c10a4ce70d67 # v2.0.0
4646
with:
4747
fail: false
4848
args: >-
@@ -65,7 +65,7 @@ jobs:
6565
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6666

6767
- name: Upload Lychee report
68-
uses: actions/upload-artifact@v4
68+
uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
6969
with:
7070
name: lychee-report
7171
path: |

‎.github/workflows/helm.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -28,19 +28,19 @@ jobs:
2828
has_artifacts: ${{ steps.check-artifacts.outputs.has_artifacts }}
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v4
31+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
fetch-depth: 0
3434
persist-credentials: false
3535

3636
- name: Install helm
37-
uses: azure/setup-helm@v4
37+
uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4.0.0
3838

3939
- name: Install Oras
40-
uses: oras-project/setup-oras@v1
40+
uses: oras-project/setup-oras@c90396b2ddabd5a364e6551a79984c86cc036996 # v1.0.0
4141

4242
- name: Login to GitHub Container Registry
43-
uses: docker/login-action@v3
43+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
4444
with:
4545
registry: ghcr.io
4646
username: ${{ github.actor }}
@@ -76,7 +76,7 @@ jobs:
7676
fi
7777
7878
- name: Upload artifacts
79-
uses: actions/upload-artifact@v4
79+
uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
8080
if: steps.check-artifacts.outputs.has_artifacts == 'true'
8181
with:
8282
name: artifacts
@@ -93,28 +93,28 @@ jobs:
9393
if: needs.package-helm-chart.outputs.has_artifacts == 'true'
9494
steps:
9595
- name: Checkout
96-
uses: actions/checkout@v4
96+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9797
with:
9898
fetch-depth: 0
9999
persist-credentials: false
100100

101101
- name: Install helm
102-
uses: azure/setup-helm@v4
102+
uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4.0.0
103103

104104
- name: Install Oras
105-
uses: oras-project/setup-oras@v1
105+
uses: oras-project/setup-oras@c90396b2ddabd5a364e6551a79984c86cc036996 # v1.0.0
106106

107107
- name: Install Cosign
108-
uses: sigstore/cosign-installer@v3
108+
uses: sigstore/cosign-installer@c3980f109a569dfb3693a68717dbf5c364743ab5 # v3.0.0
109109

110110
- name: Downloads artifacts
111-
uses: actions/download-artifact@v4
111+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
112112
with:
113113
name: artifacts
114114
path: .cr-release-packages/
115115

116116
- name: Login to GitHub Container Registry
117-
uses: docker/login-action@v3
117+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
118118
with:
119119
registry: ghcr.io
120120
username: ${{ github.actor }}

‎.github/workflows/lint-helm-charts.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,19 +28,19 @@ jobs:
2828
contents: read
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v4
31+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
fetch-depth: 0
3434
persist-credentials: false
3535

3636
- name: Set up Helm
37-
uses: azure/setup-helm@v4
37+
uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f # v4.0.0
3838

3939
- name: Set up chart-testing
40-
uses: helm/chart-testing-action@v2
40+
uses: helm/chart-testing-action@ed8c395d13ec493a81a19485dda73c287a96007d # v2.0.0
4141

4242
- name: Ensure documentation is updated
43-
uses: docker://jnorwood/helm-docs:v1.14.2
43+
uses: docker://jnorwood/helm-docs@sha256:7e562b49ab6b1dbc50c3da8f2dd6ffa8a5c6bba327b1c6335cc15ce29267979c # v1.14.2
4444

4545
- name: Run chart-testing (list-changed)
4646
id: list-changed

0 commit comments

Comments
 (0)