diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index 5bc83e82..261a7f50 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -18,9 +18,9 @@ jobs: check-dist: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.2.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set Node.js 22.x - uses: actions/setup-node@v4.3.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: npm @@ -37,7 +37,7 @@ jobs: fi id: diff # If index.js was different than expected, upload the expected version as an artifact - - uses: actions/upload-artifact@v4.6.2 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: ${{ failure() && steps.diff.conclusion == 'failure' }} with: name: dist diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index db92cb0f..113227f9 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -34,10 +34,10 @@ jobs: # Learn more about CodeQL language support at https://git.io/codeql-language-support steps: - name: Checkout repository - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3.28.12 + uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 with: languages: ${{ matrix.language }} # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). @@ -49,7 +49,7 @@ jobs: # Prefix the list here with "+" to use these queries and those in the config file. # queries: ./path/to/local/query, your-org/your-repo/queries@main - uses: github/codeql-action/autobuild@v3.28.12 + uses: github/codeql-action/autobuild@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 #- run: | # make bootstrap # make release @@ -60,4 +60,4 @@ jobs: # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines # and modify them (or add more) to build your code if your project # uses a compiled language - uses: github/codeql-action/analyze@v3.28.12 + uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 diff --git a/.github/workflows/rebuild-push-dist.yml b/.github/workflows/rebuild-push-dist.yml index 59b1936f..1f279f98 100644 --- a/.github/workflows/rebuild-push-dist.yml +++ b/.github/workflows/rebuild-push-dist.yml @@ -12,12 +12,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 0 - name: Set Node.js 16.x - uses: actions/setup-node@v4.3.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 16.x cache: npm @@ -28,14 +28,14 @@ jobs: - name: git commit dist/ id: commit run: "if [ \"$(git diff --ignore-space-at-eol dist/ | wc -l)\" -eq \"0\" ]; then\n echo \"❎ no changes to dist\"\n echo \"::set-output name=diff::false\"\n exit 0\nfi\n\ngit add dist/\ngit config --local user.email \"41898282+github-actions[bot]@users.noreply.github.com\"\ngit config --local user.name \"github-actions[bot]\"\ngit commit -m \"Apply dist changes\"\necho \"::set-output name=diff::true\"\necho \"\U0001F4BE commited dist/ changes\"\n" - - uses: tibdex/github-app-token@v2.1.0 + - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 id: generate_token if: steps.commit.outputs.diff with: app_id: ${{ secrets.FMSC_BOT_GITHUB_APP_ID }} private_key: ${{ secrets.FMSC_BOT_GITHUB_APP_PRIVATE_KEY }} - name: Push changes - uses: ad-m/github-push-action@v0.8.0 + uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0 if: steps.commit.outputs.diff with: github_token: ${{ steps.generate_token.outputs.token }} diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index 02c08feb..53c6bd32 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -9,7 +9,7 @@ jobs: update_release_draft: runs-on: ubuntu-20.04 steps: - - uses: release-drafter/release-drafter@v6.1.0 + - uses: release-drafter/release-drafter@eada3c96a64734dd381cfbda23511034e328ddb0 # v7.6.0 with: config-name: release-drafter.yaml publish: startsWith(github.ref, "refs/tags") diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 68da5c02..ad2b7ba8 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Git Checkout - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install Updatecli uses: ./ - name: Get fslabscli version diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml index 6537f842..ceda2436 100644 --- a/.github/workflows/updatecli.yaml +++ b/.github/workflows/updatecli.yaml @@ -17,15 +17,15 @@ jobs: contents: read steps: - name: 'Checkout' - uses: 'actions/checkout@v4.2.2' + uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7.0.1 - name: 'Setup updatecli' - uses: 'updatecli/updatecli-action@v2' + uses: 'updatecli/updatecli-action@8f943416e0174f7029a718eb46a18657e17ebaff' # v2 - name: 'Run updatecli in dryrun' run: 'updatecli compose diff' env: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - uses: actions/create-github-app-token@v1.11.7 + - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 id: generate_token if: github.ref == 'refs/heads/v1' with: