diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index 5bc83e82..e18967c6 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -18,9 +18,9 @@ jobs: check-dist: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.2.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set Node.js 22.x - uses: actions/setup-node@v4.3.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 cache: npm @@ -37,7 +37,7 @@ jobs: fi id: diff # If index.js was different than expected, upload the expected version as an artifact - - uses: actions/upload-artifact@v4.6.2 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ failure() && steps.diff.conclusion == 'failure' }} with: name: dist diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index db92cb0f..e29a6efa 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -34,10 +34,10 @@ jobs: # Learn more about CodeQL language support at https://git.io/codeql-language-support steps: - name: Checkout repository - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3.28.12 + uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: languages: ${{ matrix.language }} # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). @@ -49,7 +49,7 @@ jobs: # Prefix the list here with "+" to use these queries and those in the config file. # queries: ./path/to/local/query, your-org/your-repo/queries@main - uses: github/codeql-action/autobuild@v3.28.12 + uses: github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 #- run: | # make bootstrap # make release @@ -60,4 +60,4 @@ jobs: # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines # and modify them (or add more) to build your code if your project # uses a compiled language - uses: github/codeql-action/analyze@v3.28.12 + uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 diff --git a/.github/workflows/rebuild-push-dist.yml b/.github/workflows/rebuild-push-dist.yml index 59b1936f..0ff4490e 100644 --- a/.github/workflows/rebuild-push-dist.yml +++ b/.github/workflows/rebuild-push-dist.yml @@ -12,12 +12,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false fetch-depth: 0 - name: Set Node.js 16.x - uses: actions/setup-node@v4.3.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 16.x cache: npm @@ -28,14 +28,14 @@ jobs: - name: git commit dist/ id: commit run: "if [ \"$(git diff --ignore-space-at-eol dist/ | wc -l)\" -eq \"0\" ]; then\n echo \"❎ no changes to dist\"\n echo \"::set-output name=diff::false\"\n exit 0\nfi\n\ngit add dist/\ngit config --local user.email \"41898282+github-actions[bot]@users.noreply.github.com\"\ngit config --local user.name \"github-actions[bot]\"\ngit commit -m \"Apply dist changes\"\necho \"::set-output name=diff::true\"\necho \"\U0001F4BE commited dist/ changes\"\n" - - uses: tibdex/github-app-token@v2.1.0 + - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 id: generate_token if: steps.commit.outputs.diff with: app_id: ${{ secrets.FMSC_BOT_GITHUB_APP_ID }} private_key: ${{ secrets.FMSC_BOT_GITHUB_APP_PRIVATE_KEY }} - name: Push changes - uses: ad-m/github-push-action@v0.8.0 + uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0 if: steps.commit.outputs.diff with: github_token: ${{ steps.generate_token.outputs.token }} diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index 02c08feb..05b42a64 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -9,7 +9,7 @@ jobs: update_release_draft: runs-on: ubuntu-20.04 steps: - - uses: release-drafter/release-drafter@v6.1.0 + - uses: release-drafter/release-drafter@978bb0b30c5ee8cdd332ced253758157150d43f0 # v7.10.0 with: config-name: release-drafter.yaml publish: startsWith(github.ref, "refs/tags") diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 68da5c02..ad2b7ba8 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Git Checkout - uses: actions/checkout@v4.2.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install Updatecli uses: ./ - name: Get fslabscli version diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml index 6537f842..4685f432 100644 --- a/.github/workflows/updatecli.yaml +++ b/.github/workflows/updatecli.yaml @@ -17,15 +17,15 @@ jobs: contents: read steps: - name: 'Checkout' - uses: 'actions/checkout@v4.2.2' + uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7.0.1 - name: 'Setup updatecli' - uses: 'updatecli/updatecli-action@v2' + uses: 'updatecli/updatecli-action@6bfb9f2e6b20bfb283f94627d2f24659b8f38b8e' # v2 - name: 'Run updatecli in dryrun' run: 'updatecli compose diff' env: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - uses: actions/create-github-app-token@v1.11.7 + - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: generate_token if: github.ref == 'refs/heads/v1' with: