Skip to content

Commit 189002e

Browse files
yottahmdyottahmd
authored
chore: pin GitHub Actions to commit SHAs and update to latest versions (#1985)
1 parent 3b4c426 commit 189002e

13 files changed

+57
-85
lines changed

‎.codespell-ignore-words‎

Lines changed: 0 additions & 6 deletions
This file was deleted.

‎.codespellrc‎

Lines changed: 0 additions & 7 deletions
This file was deleted.

‎.github/workflows/chart-ci.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
runs-on: ubuntu-latest
4242
steps:
4343
- name: Check out code
44-
uses: actions/checkout@v6
44+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4545
with:
4646
fetch-depth: 0
4747

@@ -93,7 +93,7 @@ jobs:
9393
fi
9494
9595
- name: Set up Helm
96-
uses: azure/setup-helm@v5.0.0
96+
uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
9797

9898
- name: Lint chart
9999
run: helm lint ./charts/dagu

‎.github/workflows/chart-release.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
runs-on: ubuntu-latest
2828
steps:
2929
- name: Check out code
30-
uses: actions/checkout@v6
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3131
with:
3232
fetch-depth: 0
3333

@@ -37,7 +37,7 @@ jobs:
3737
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
3838
3939
- name: Run chart releaser
40-
uses: helm/chart-releaser-action@v1.7.0
40+
uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0
4141
with:
4242
config: cr.yaml
4343
charts_dir: charts

‎.github/workflows/ci.yaml‎

Lines changed: 6 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -31,31 +31,16 @@ env:
3131
GO_VERSION: "1.26"
3232

3333
jobs:
34-
# Spell check
35-
codespell:
36-
name: Check for spelling errors
37-
runs-on: ubuntu-latest
38-
steps:
39-
- name: Checkout
40-
uses: actions/checkout@v6
41-
42-
- name: Codespell
43-
uses: codespell-project/actions-codespell@v2
44-
with:
45-
check_hidden: true
46-
skip: ./.git,*.svg,go.mod,go.sum,*.gen.go,pnpm-lock.yaml,*.lock,*.css,.codespellrc,.codespell-ignore-words,CHANGELOG.md
47-
ignore_words_file: .codespell-ignore-words
48-
4934
# Lint Go code
5035
golint:
5136
name: Go Linter
5237
runs-on: ubuntu-latest
5338
steps:
5439
- name: Check out code
55-
uses: actions/checkout@v6
40+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5641

5742
- name: Set up Go
58-
uses: actions/setup-go@v6
43+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
5944
with:
6045
go-version: ${{ env.GO_VERSION }}
6146

@@ -75,7 +60,7 @@ jobs:
7560
fi
7661
7762
- name: Run golangci-lint
78-
uses: golangci/golangci-lint-action@v9
63+
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
7964
with:
8065
version: v2.9.0
8166
args: --timeout=10m
@@ -92,10 +77,10 @@ jobs:
9277
# - windows-latest
9378
steps:
9479
- name: Check out code
95-
uses: actions/checkout@v6
80+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9681

9782
- name: Set up Go
98-
uses: actions/setup-go@v6
83+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
9984
with:
10085
go-version: ${{ env.GO_VERSION }}
10186

@@ -121,7 +106,7 @@ jobs:
121106
122107
- name: Upload coverage
123108
if: matrix.os == 'ubuntu-latest'
124-
uses: codecov/codecov-action@v6
109+
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
125110
with:
126111
files: ./coverage.out
127112
env:

‎.github/workflows/docker-manual.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,17 @@ jobs:
1717
packages: write
1818
steps:
1919
- name: Check out code
20-
uses: actions/checkout@v6
20+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2121
with:
2222
ref: ${{ inputs.ref }}
2323

2424
- name: Set up Docker Buildx
25-
uses: docker/setup-buildx-action@v3
25+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
2626
with:
2727
platforms: linux/amd64,linux/arm64,linux/arm/v7
2828

2929
- name: Login to GitHub Container Registry
30-
uses: docker/login-action@v3
30+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
3131
with:
3232
registry: ghcr.io
3333
username: ${{ github.actor }}
@@ -47,7 +47,7 @@ jobs:
4747
echo "VERSION=$VERSION" >> "$GITHUB_ENV"
4848
4949
- name: Build and push Docker image
50-
uses: docker/build-push-action@v6
50+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
5151
with:
5252
context: .
5353
file: Dockerfile
@@ -66,17 +66,17 @@ jobs:
6666
packages: write
6767
steps:
6868
- name: Check out code
69-
uses: actions/checkout@v6
69+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7070
with:
7171
ref: ${{ inputs.ref }}
7272

7373
- name: Set up Docker Buildx
74-
uses: docker/setup-buildx-action@v3
74+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
7575
with:
7676
platforms: linux/amd64,linux/arm64,linux/arm/v7
7777

7878
- name: Login to GitHub Container Registry
79-
uses: docker/login-action@v3
79+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
8080
with:
8181
registry: ghcr.io
8282
username: ${{ github.actor }}
@@ -96,7 +96,7 @@ jobs:
9696
echo "VERSION=$VERSION" >> "$GITHUB_ENV"
9797
9898
- name: Build and push Docker image
99-
uses: docker/build-push-action@v6
99+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
100100
with:
101101
context: .
102102
file: Dockerfile.dev
@@ -116,17 +116,17 @@ jobs:
116116
packages: write
117117
steps:
118118
- name: Check out code
119-
uses: actions/checkout@v6
119+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
120120
with:
121121
ref: ${{ inputs.ref }}
122122

123123
- name: Set up Docker Buildx
124-
uses: docker/setup-buildx-action@v3
124+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
125125
with:
126126
platforms: linux/amd64,linux/arm64,linux/arm/v7
127127

128128
- name: Login to GitHub Container Registry
129-
uses: docker/login-action@v3
129+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
130130
with:
131131
registry: ghcr.io
132132
username: ${{ github.actor }}
@@ -146,7 +146,7 @@ jobs:
146146
echo "VERSION=$VERSION" >> "$GITHUB_ENV"
147147
148148
- name: Build and push Docker image
149-
uses: docker/build-push-action@v6
149+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
150150
with:
151151
context: .
152152
file: Dockerfile.alpine

‎.github/workflows/docker.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
packages: write
1616
steps:
1717
- name: Check out code
18-
uses: actions/checkout@v6
18+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1919

2020
- name: Extract version from tag
2121
id: get_version
@@ -31,19 +31,19 @@ jobs:
3131
fi
3232
3333
- name: Set up Docker Buildx
34-
uses: docker/setup-buildx-action@v3
34+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
3535
with:
3636
platforms: linux/amd64,linux/arm64,linux/arm/v7
3737

3838
- name: Login to GitHub Container Registry
39-
uses: docker/login-action@v3
39+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
4040
with:
4141
registry: ghcr.io
4242
username: ${{ github.actor }}
4343
password: ${{ secrets.DAGU_GITHUB_TOKEN }}
4444

4545
- name: Build and push Docker image
46-
uses: docker/build-push-action@v6
46+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
4747
with:
4848
context: .
4949
file: Dockerfile
@@ -62,7 +62,7 @@ jobs:
6262
packages: write
6363
steps:
6464
- name: Check out code
65-
uses: actions/checkout@v6
65+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6666

6767
- name: Extract version from tag
6868
id: get_version
@@ -78,19 +78,19 @@ jobs:
7878
fi
7979
8080
- name: Set up Docker Buildx
81-
uses: docker/setup-buildx-action@v3
81+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
8282
with:
8383
platforms: linux/amd64,linux/arm64,linux/arm/v7
8484

8585
- name: Login to GitHub Container Registry
86-
uses: docker/login-action@v3
86+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
8787
with:
8888
registry: ghcr.io
8989
username: ${{ github.actor }}
9090
password: ${{ secrets.DAGU_GITHUB_TOKEN }}
9191

9292
- name: Build and push Docker image
93-
uses: docker/build-push-action@v6
93+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
9494
with:
9595
context: .
9696
file: Dockerfile.dev
@@ -109,7 +109,7 @@ jobs:
109109
packages: write
110110
steps:
111111
- name: Check out code
112-
uses: actions/checkout@v6
112+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
113113

114114
- name: Extract version from tag
115115
id: get_version
@@ -125,19 +125,19 @@ jobs:
125125
fi
126126
127127
- name: Set up Docker Buildx
128-
uses: docker/setup-buildx-action@v3
128+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
129129
with:
130130
platforms: linux/amd64,linux/arm64,linux/arm/v7
131131

132132
- name: Login to GitHub Container Registry
133-
uses: docker/login-action@v3
133+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
134134
with:
135135
registry: ghcr.io
136136
username: ${{ github.actor }}
137137
password: ${{ secrets.DAGU_GITHUB_TOKEN }}
138138

139139
- name: Build and push Docker image
140-
uses: docker/build-push-action@v6
140+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
141141
with:
142142
context: .
143143
file: Dockerfile.alpine

‎.github/workflows/frontend-ci.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,15 +24,15 @@ jobs:
2424
runs-on: ubuntu-latest
2525
steps:
2626
- name: Check out code
27-
uses: actions/checkout@v6
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2828

2929
- name: Setup pnpm
30-
uses: pnpm/action-setup@v5
30+
uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
3131
with:
3232
version: 10
3333

3434
- name: Setup Node.js
35-
uses: actions/setup-node@v6
35+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3636
with:
3737
node-version: "20"
3838
cache: "pnpm"

‎.github/workflows/image-security.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -50,13 +50,13 @@ jobs:
5050

5151
steps:
5252
- name: Check out code
53-
uses: actions/checkout@v6
53+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5454

5555
- name: Set up Docker Buildx
56-
uses: docker/setup-buildx-action@v3
56+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
5757

5858
- name: Build image locally
59-
uses: docker/build-push-action@v6
59+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
6060
with:
6161
context: .
6262
file: ${{ matrix.dockerfile }}
@@ -65,7 +65,7 @@ jobs:
6565
tags: ${{ matrix.tag }}
6666

6767
- name: Run Trivy vulnerability scanner
68-
uses: aquasecurity/trivy-action@v0.35.0
68+
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
6969
with:
7070
scan-type: image
7171
image-ref: ${{ matrix.tag }}

‎.github/workflows/manual-release.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,18 +14,18 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: Check out code
17-
uses: actions/checkout@v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
fetch-depth: 0
2020
ref: ${{ github.event.inputs.tag }}
2121

2222
- name: Set up Go
23-
uses: actions/setup-go@v6
23+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
2424
with:
2525
go-version-file: go.mod
2626

2727
- name: Set up NodeJS
28-
uses: actions/setup-node@v6
28+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2929
with:
3030
node-version: 22
3131

@@ -47,9 +47,9 @@ jobs:
4747
run: rm -rf ui/node_modules
4848

4949
- name: Run GoReleaser
50-
uses: goreleaser/goreleaser-action@v6
50+
uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
5151
with:
52-
version: latest
52+
version: ~> v2
5353
args: release --clean
5454
env:
5555
GITHUB_TOKEN: ${{secrets.DAGU_GITHUB_TOKEN}}

0 commit comments

Comments
 (0)