pin specific hash for github actions on CI

drand · Oct 6, 2021 · f6d743c · f6d743c
1 parent 1e37d78
commit f6d743c
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 16 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -12,11 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # pin@v2
+      - uses: actions/setup-go@331ce1d993939866bb63c32c6cbbfd48fa76fc57 # pin@v2
         with:
           go-version: '^1.17'
-      - uses: actions/cache@v2
+      - uses: actions/cache@c64c572235d810460d0d6876e9c705ad5002b353 # pin@v2
         id: cache
         with:
           path: ~/go/pkg/mod
@@ -30,4 +30,4 @@ jobs:
           docker push drandorg/go-drand:latest
         env:
           DOCKER_PWD: ${{ secrets.DOCKER_PWD }}
-          DOCKER_LOGIN: ${{ secrets.DOCKER_LOGIN }}
+          DOCKER_LOGIN: ${{ secrets.DOCKER_LOGIN }}
diff --git a/.github/workflows/publish_tagged.yaml b/.github/workflows/publish_tagged.yaml
@@ -12,11 +12,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # pin@v2
+      - uses: actions/setup-go@331ce1d993939866bb63c32c6cbbfd48fa76fc57 # pin@v2
         with:
           go-version: '^1.17'
-      - uses: actions/cache@v2
+      - uses: actions/cache@c64c572235d810460d0d6876e9c705ad5002b353 # pin@v2
         id: cache
         with:
           path: ~/go/pkg/mod
@@ -25,10 +25,10 @@ jobs:
             ${{ runner.os }}-go-
       - name: Get latest release version number
         id: get_version
-        uses: battila7/get-version-action@v2
+        uses: battila7/get-version-action@d97fbc34ceb64d1f5d95f4dfd6dce33521ccccf5 # pin@v2
       - name: Parse semver string
         id: semver_parser
-        uses: booxmedialtd/ws-action-parse-semver@v1
+        uses: booxmedialtd/ws-action-parse-semver@3576f3a20a39f8752fe0d8195f5ed384090285dc # pin@v1
         with:
           input_string: ${{ steps.get_version.outputs.version }}
           version_extractor_regex: 'v(.*)$'
@@ -39,4 +39,4 @@ jobs:
           docker push drandorg/go-drand:`git describe --tags`
         env:
           DOCKER_PWD: ${{ secrets.DOCKER_PWD }}
-          DOCKER_LOGIN: ${{ secrets.DOCKER_LOGIN }}
+          DOCKER_LOGIN: ${{ secrets.DOCKER_LOGIN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -10,17 +10,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # pin@v2
         with:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@331ce1d993939866bb63c32c6cbbfd48fa76fc57 # pin@v2
         with:
           go-version: '1.17'
 
       - name: Install Protoc
-        uses: arduino/setup-protoc@v1.1.2
+        uses: arduino/setup-protoc@64c0c85d18e984422218383b81c52f8b077404d3 # pin@v1.1.2
         with:
           version: '3.14.0'
 
@@ -32,17 +32,17 @@ jobs:
 
       - name: Get latest release version number
         id: get_version
-        uses: battila7/get-version-action@v2
+        uses: battila7/get-version-action@d97fbc34ceb64d1f5d95f4dfd6dce33521ccccf5 # pin@v2
 
       - name: Parse semver string
         id: semver_parser
-        uses: booxmedialtd/ws-action-parse-semver@v1
+        uses: booxmedialtd/ws-action-parse-semver@3576f3a20a39f8752fe0d8195f5ed384090285dc # pin@v1
         with:
           input_string: ${{ steps.get_version.outputs.version }}
           version_extractor_regex: 'v(.*)$'
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@5a54d7e660bda43b405e8463261b3d25631ffe86 # pin@v2
         with:
           version: latest
           args: release --rm-dist