From 5b5983f1cc4b772b74fbf04bbae33598c8467d83 Mon Sep 17 00:00:00 2001 From: Platform Tribe Bot Date: Mon, 25 May 2026 13:05:13 +0000 Subject: [PATCH] chore: pin and bump GitHub Actions references - Regenerate actions.lock.yaml with current action inventory - Bump internal (surgeventures/platform-tribe-actions) refs to latest versions - Pin external action refs to commit SHAs for supply-chain security --- .github/actions.lock.yaml | 31 ++++++++++++++++++++++++++++++ .github/workflows/docker-build.yml | 2 +- 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 .github/actions.lock.yaml diff --git a/.github/actions.lock.yaml b/.github/actions.lock.yaml new file mode 100644 index 000000000..587b79f23 --- /dev/null +++ b/.github/actions.lock.yaml @@ -0,0 +1,31 @@ +version: 1 +generated_at: 2026-05-25T13:05:12Z +internal: [] +trusted: + - action: actions/checkout + refs: + - v2 + occurrences: + v2: + .github/workflows/docker-build.yml: + - jobs.build.steps.[0].uses + .github/workflows/python-package.yml: + - jobs.build.steps.[0].uses + - action: actions/setup-python + refs: + - v4.0.0 + occurrences: + v4.0.0: + .github/workflows/python-package.yml: + - jobs.build.steps.[1].uses +external: + - action: mr-smithers-excellent/docker-build-push + refs: + - v5 + occurrences: + v5: + .github/workflows/docker-build.yml: + - jobs.build.steps.[1].uses +local: [] +docker: [] +dynamic: [] diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 1926b0f13..cce65668b 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -18,7 +18,7 @@ jobs: uses: actions/checkout@v2 - name: build and push docker image - uses: mr-smithers-excellent/docker-build-push@v5 + uses: mr-smithers-excellent/docker-build-push@0e68818ea37ba7728f417f03a58e06e68d9d2592 # v5 with: image: errbotio/errbot tags: latest