From bfe16ccc49e053711d3518d7dd0334577f21b1b2 Mon Sep 17 00:00:00 2001 From: Tobias Lindberg Date: Mon, 18 Aug 2025 15:02:26 +0200 Subject: [PATCH] feat(ci): use sha instead of tag on steps --- .github/workflows/build.yml | 20 ++++++++++---------- .github/workflows/codecov.yml | 8 ++++---- .github/workflows/codeql-analysis.yml | 10 +++++----- .github/workflows/dockerhub.yml | 4 ++-- .github/workflows/documentation.yml | 8 ++++---- 5 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7307974c..3f29b80d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -28,11 +28,11 @@ jobs: docker_meta_version: ${{ steps.docker_meta.outputs.version }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 - name: Docker meta id: docker_meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f #v5.8.0 with: images: | tibiadata/tibiadata-api-go @@ -48,24 +48,24 @@ jobs: - name: Install Cosign if: github.event_name != 'pull_request' - uses: sigstore/cosign-installer@v3 + uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 #v3.9.2 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1 - name: Login to DockerHub if: github.event_name != 'pull_request' - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Login to GitHub Container Registry if: github.event_name != 'pull_request' - uses: docker/login-action@v3 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 #v3.5.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -73,7 +73,7 @@ jobs: - name: Build and push id: docker_build - uses: docker/build-push-action@v6 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 #v6.18.0 with: context: . platforms: linux/amd64,linux/arm/v7,linux/arm64 @@ -113,7 +113,7 @@ jobs: fi - name: Trigger workflow in tibiadata-argocd-app-of-apps repo - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 #v3.0.0 with: token: ${{ secrets.REPO_ACCESS_TOKEN }} repository: TibiaData/tibiadata-argocd-app-of-apps @@ -128,7 +128,7 @@ jobs: needs: build steps: - name: Trigger workflow in tibiadata-helm-charts repo - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 #v3.0.0 with: token: ${{ secrets.REPO_ACCESS_TOKEN }} repository: TibiaData/tibiadata-helm-charts diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 1794d630..599f9945 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -12,16 +12,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 - name: Setup go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v5.5.0 with: go-version-file: go.mod - name: Connect to Tailnet if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: tailscale/github-action@v3 + uses: tailscale/github-action@84a3f23bb4d843bcf4da6cf824ec1be473daf4de #v3.2.3 with: args: --accept-dns=true oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }} @@ -34,6 +34,6 @@ jobs: go test -race -coverprofile=coverage.out -covermode=atomic `go list ./... | grep -v vendor/` -v - name: Uploading coverage to Codecov - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 #v5.4.3 with: token: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 60975bc5..e4e79f4f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -24,20 +24,20 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 - name: Setup go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v5.5.0 with: go-version-file: go.mod - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c #v3.29.10 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@v3 + uses: github/codeql-action/autobuild@96f518a34f7a870018057716cc4d7a5c014bd61c #v3.29.10 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c #v3.29.10 diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml index a9381468..ce049665 100644 --- a/.github/workflows/dockerhub.yml +++ b/.github/workflows/dockerhub.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 - name: Docker Hub Description - uses: peter-evans/dockerhub-description@v4 + uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 #v4.0.2 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml index d67464c5..dcdf7f9e 100644 --- a/.github/workflows/documentation.yml +++ b/.github/workflows/documentation.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v5.5.0 with: go-version-file: go.mod @@ -34,14 +34,14 @@ jobs: echo "${contents}" > docs/swagger.json - name: Upload swagger.json to release page - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 #2.11.2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} file: docs/swagger.json tag: ${{ github.ref }} - name: Trigger workflow in tibiadata-api-docs repo - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 #v3.0.0 with: token: ${{ secrets.REPO_ACCESS_TOKEN }} repository: TibiaData/tibiadata-api-docs