resolve build fail

Author: shubham-stepsecurity

remediation/workflow/hardenrunner/addaction.go

@@ -47,7 +47,8 @@ func AddAction(inputYaml, action string, pinActions, pinToImmutable bool) (strin
 	}
 
 	if updated && pinActions {
-		out, _ = pin.PinAction(action, out, nil, pinToImmutable)
+		immutableMap := pin.GetSemanticActionsImmutableMap([]string{action}, pinToImmutable)
+		out, _ = pin.PinAction(action, out, nil, immutableMap)
 	}
 
 	return out, updated, nil

remediation/workflow/pin/pinactions.go

@@ -17,15 +17,25 @@ import (
 func PinActions(inputYaml string, exemptedActions []string, pinToImmutable bool) (string, bool, error) {
 	workflow := metadata.Workflow{}
 	updated := false
+	var allActions []string
 	err := yaml.Unmarshal([]byte(inputYaml), &workflow)
 	if err != nil {
 		return inputYaml, updated, fmt.Errorf("unable to parse yaml %v", err)
 	}
 
 	out := inputYaml
 
+	// get all jobs present in the workflow
+	for _, job := range workflow.Jobs {
+		for _, step := range job.Steps {
+			if strings.Contains(step.Uses, "@") && !strings.HasPrefix(step.Uses, "docker://") && !isAbsolute(step.Uses) {
+				allActions = append(allActions, step.Uses)
+			}
+		}
+	}
+
 	// get immutable map for the semantic versions of the actions present in the workflow
-	immutableMap := getSemanticActionsImmutableMap(workflow, pinToImmutable)
+	immutableMap := GetSemanticActionsImmutableMap(allActions, pinToImmutable)
 
 	for _, job := range workflow.Jobs {
 
@@ -217,8 +227,7 @@ func ActionExists(actionName string, patterns []string) bool {
 	return false
 }
 
-func getSemanticActionsImmutableMap(workflow metadata.Workflow, pinToImmutable bool) map[string]bool {
-	var allActions []string
+func GetSemanticActionsImmutableMap(allActions []string, pinToImmutable bool) map[string]bool {
 	var allSemanticActions []string
 	immutableMap := make(map[string]bool)
 
@@ -227,15 +236,6 @@ func getSemanticActionsImmutableMap(workflow metadata.Workflow, pinToImmutable b
 		return immutableMap
 	}
 
-	// get all jobs present in the workflow
-	for _, job := range workflow.Jobs {
-		for _, step := range job.Steps {
-			if strings.Contains(step.Uses, "@") && !strings.HasPrefix(step.Uses, "docker://") && !isAbsolute(step.Uses) {
-				allActions = append(allActions, step.Uses)
-			}
-		}
-	}
-
 	PAT := os.Getenv("PAT")
 
 	ctx := context.Background()