Merge pull request #13240 from chrisroberts/pinning

Pin actions in workflows
hashicorp · Jul 29, 2023 · 9969b58 · 9969b58
2 parents 8004b9e + a8ce678
commit 9969b58
Show file tree

Hide file tree

Showing 15 changed files with 21 additions and 157 deletions.
diff --git a/.github/workflows/code.yml b/.github/workflows/code.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           persist-credentials: false
           fetch-depth: 0

diff --git a/.github/workflows/dev-appimage-build.yml b/.github/workflows/dev-appimage-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-appimage
         env:

diff --git a/.github/workflows/dev-arch-build.yml b/.github/workflows/dev-arch-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-arch
         env:

diff --git a/.github/workflows/dev-build.yml b/.github/workflows/dev-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build
         env:

diff --git a/.github/workflows/dev-debs-build.yml b/.github/workflows/dev-debs-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-debs
         env:

diff --git a/.github/workflows/dev-macos-build.yml b/.github/workflows/dev-macos-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-macos
         env:

diff --git a/.github/workflows/dev-rpms-build.yml b/.github/workflows/dev-rpms-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-rpms
         env:

diff --git a/.github/workflows/dev-windows-build.yml b/.github/workflows/dev-windows-build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Development Build
         run: ./.ci/dev-build "${BRANCH}" "${COMMIT_ID}" build-windows
         env:

diff --git a/.github/workflows/go-spectest.yml b/.github/workflows/go-spectest.yml
@@ -23,18 +23,18 @@ jobs:
     name: Vagrant acceptance tests (Ruby ${{ matrix.ruby }})
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           submodules: 'recursive'
           # Also fetch all tags, since we need our version number in the build
           # to be based off a tag
           fetch-depth: 0
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
         with:
           go-version-file: go.mod
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
         with:
           ruby-version: ${{matrix.ruby}}
           bundler-cache: true

diff --git a/.github/workflows/go-testing.yml b/.github/workflows/go-testing.yml
@@ -30,13 +30,13 @@ jobs:
     name: Vagrant unit tests on Go (Ruby ${{ matrix.ruby }})
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
         with:
           go-version-file: go.mod
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
         with:
           ruby-version: ${{matrix.ruby}}
           bundler-cache: true

diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
@@ -11,8 +11,8 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: dessant/lock-threads@v2
+      - uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21 # v4.0.1
         with:
           github-token: ${{ github.token }}
-          issue-lock-inactive-days: '30'
-          pr-lock-inactive-days: '30'
+          issue-inactive-days: '30'
+          pr-inactive-days: '30'
diff --git a/.github/workflows/nightlies.yml b/.github/workflows/nightlies.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Nightly Build
         run: ./.ci/nightly-build "${COMMIT_ID}"
         env:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Trigger Build
         run: ./.ci/release "${TAG}" "${COMMIT_ID}"
         env:

diff --git a/.github/workflows/spectesting.yml b/.github/workflows/spectesting.yml
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
@@ -36,9 +36,9 @@ jobs:
     name: Vagrant unit tests on Ruby ${{ matrix.ruby }}
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
       - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
         with:
           ruby-version: ${{matrix.ruby}}
           bundler-cache: true