chore(deps): pin dependencies

suzuki-shunsuke · Jan 14, 2023 · a8ca9b2 · a8ca9b2
1 parent 7983183
commit a8ca9b2
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 16 deletions.
diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml
@@ -13,8 +13,8 @@ jobs:
   default:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: aquaproj/aqua-installer@v1.2.0
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+    - uses: aquaproj/aqua-installer@a39f721a15ed34ccbc85706e6e8ae8572c9ca9c6 # v1.2.0
       with:
         aqua_version: v1.31.0
-    - uses: suzuki-shunsuke/github-action-actionlint@v0.1.2
+    - uses: suzuki-shunsuke/github-action-actionlint@764a394381fb91f87ca8a8ad022bbeb49232df8b # v0.1.2
diff --git a/.github/workflows/close-renovate-pr.yaml b/.github/workflows/close-renovate-pr.yaml
@@ -9,8 +9,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: aquaproj/aqua-installer@v1.2.0
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+    - uses: aquaproj/aqua-installer@a39f721a15ed34ccbc85706e6e8ae8572c9ca9c6 # v1.2.0
       with:
         aqua_version: v1.31.0
     - run: renovate-issue-action

diff --git a/.github/workflows/renovate-config-validator.yaml b/.github/workflows/renovate-config-validator.yaml
@@ -18,5 +18,5 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: suzuki-shunsuke/github-action-renovate-config-validator@v0.1.2
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+    - uses: suzuki-shunsuke/github-action-renovate-config-validator@7ab3d8f19305664925f3e626580f075f14e40386 # v0.1.2
diff --git a/.github/workflows/test-release.yaml b/.github/workflows/test-release.yaml
@@ -12,8 +12,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+    - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
       with:
         go-version: '1.18.1'
 
@@ -25,7 +25,7 @@ jobs:
     - name: Unshallow
       run: git fetch --prune --unshallow
     - name: Run GoReleaser (skip publish)
-      uses: goreleaser/goreleaser-action@v3
+      uses: goreleaser/goreleaser-action@b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757 # v3
       if: "! startsWith(github.ref, 'refs/tags/')"
       with:
         version: latest

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -10,22 +10,22 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-go@v3
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+    - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
       with:
         go-version: '1.18.1'
 
-    - uses: aquaproj/aqua-installer@v1.2.0
+    - uses: aquaproj/aqua-installer@a39f721a15ed34ccbc85706e6e8ae8572c9ca9c6 # v1.2.0
       with:
         aqua_version: v1.31.0
-    - uses: suzuki-shunsuke/github-action-golangci-lint@v0.1.4
+    - uses: suzuki-shunsuke/github-action-golangci-lint@4b6bb7682772359cf0e7959932803ca2ff998895 # v0.1.4
 
     - run: go test -v ./... -race -covermode=atomic
 
     - name: Generate token
       id: generate_token
       if: startsWith(github.ref, 'refs/tags/')
-      uses: tibdex/github-app-token@v1
+      uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c # v1
       with:
         app_id: ${{ secrets.APP_ID }}
         private_key: ${{ secrets.APP_PRIVATE_KEY }}
@@ -38,7 +38,7 @@ jobs:
     - name: Unshallow
       run: git fetch --prune --unshallow
     - name: Run GoReleaser
-      uses: goreleaser/goreleaser-action@v3
+      uses: goreleaser/goreleaser-action@b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757 # v3
       if: startsWith(github.ref, 'refs/tags/')
       with:
         version: latest