Lock actions used in workflows on patch releases

philips-labs · Mar 9, 2022 · 489d3b7 · 489d3b7
1 parent d515ccd
commit 489d3b7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v3.0.0
         with:
           go-version: 1.17
           check-latest: true
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.0.0
 
       - name: Cache Go modules
         uses: actions/cache@v2.1.7
@@ -73,7 +73,7 @@ jobs:
 
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v3.0.0
         with:
           go-version: 1.17
           check-latest: true
@@ -87,7 +87,7 @@ jobs:
         uses: anchore/sbom-action/download-syft@v0.7.0
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.0.0
         with:
           fetch-depth: 0
 

diff --git a/.github/workflows/example-local.yaml b/.github/workflows/example-local.yaml
@@ -44,7 +44,7 @@ jobs:
     steps:
       # checkout only required to run local action (defined in this repo)
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.0.0
 
       - name: Download build artifact
         uses: actions/download-artifact@v2