Skip to content

Commit 9637f1b

Browse files
vvolandvvoland
authored
Merge pull request #6886 from thaJeztah/pin_actions
ci: pin actions to digests
2 parents 7922984 + 97b9e04 commit 9637f1b

File tree

6 files changed

+33
-29
lines changed

6 files changed

+33
-29
lines changed

‎.github/dependabot.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,3 +7,5 @@ updates:
77
labels:
88
- "area/testing"
99
- "status/2-code-review"
10+
cooldown:
11+
default-days: 7

‎.github/workflows/build.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
steps:
3636
-
3737
name: Checkout
38-
uses: actions/checkout@v6
38+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3939
-
4040
name: Create matrix
4141
id: platforms
@@ -63,10 +63,10 @@ jobs:
6363
steps:
6464
-
6565
name: Set up Docker Buildx
66-
uses: docker/setup-buildx-action@v4
66+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
6767
-
6868
name: Build
69-
uses: docker/bake-action@v7
69+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7
7070
with:
7171
targets: ${{ matrix.target }}
7272
set: |
@@ -88,7 +88,7 @@ jobs:
8888
fi
8989
-
9090
name: Upload artifacts
91-
uses: actions/upload-artifact@v7
91+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
9292
with:
9393
name: ${{ env.ARTIFACT_NAME }}
9494
path: /tmp/out/*
@@ -101,20 +101,20 @@ jobs:
101101
-
102102
name: Login to DockerHub
103103
if: github.event_name != 'pull_request'
104-
uses: docker/login-action@v4
104+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
105105
with:
106106
username: ${{ secrets.DOCKERHUB_CLIBIN_USERNAME }}
107107
password: ${{ secrets.DOCKERHUB_CLIBIN_TOKEN }}
108108
-
109109
name: Set up QEMU
110-
uses: docker/setup-qemu-action@v4
110+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
111111
-
112112
name: Set up Docker Buildx
113-
uses: docker/setup-buildx-action@v4
113+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
114114
-
115115
name: Docker meta
116116
id: meta
117-
uses: docker/metadata-action@v6
117+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
118118
with:
119119
images: dockereng/cli-bin
120120
tags: |
@@ -125,7 +125,7 @@ jobs:
125125
type=semver,pattern={{major}}.{{minor}}
126126
-
127127
name: Build and push image
128-
uses: docker/bake-action@v7
128+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7
129129
with:
130130
files: |
131131
./docker-bake.hcl
@@ -143,7 +143,7 @@ jobs:
143143
steps:
144144
-
145145
name: Checkout
146-
uses: actions/checkout@v6
146+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
147147
-
148148
name: Create matrix
149149
id: platforms
@@ -165,10 +165,10 @@ jobs:
165165
steps:
166166
-
167167
name: Set up Docker Buildx
168-
uses: docker/setup-buildx-action@v4
168+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
169169
-
170170
name: Build
171-
uses: docker/bake-action@v7
171+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7
172172
with:
173173
targets: plugins-cross
174174
set: |

‎.github/workflows/codeql.yml‎

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
steps:
4747
-
4848
name: Checkout
49-
uses: actions/checkout@v6
49+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5050
with:
5151
fetch-depth: 2
5252
# CodeQL 2.16.4's auto-build added support for multi-module repositories,
@@ -61,19 +61,20 @@ jobs:
6161
ln -s vendor.sum go.sum
6262
-
6363
name: Update Go
64-
uses: actions/setup-go@v6
64+
uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
6565
with:
6666
go-version: "1.25.8"
67+
cache: false
6768
-
6869
name: Initialize CodeQL
69-
uses: github/codeql-action/init@v4
70+
uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
7071
with:
7172
languages: go
7273
-
7374
name: Autobuild
74-
uses: github/codeql-action/autobuild@v4
75+
uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
7576
-
7677
name: Perform CodeQL Analysis
77-
uses: github/codeql-action/analyze@v4
78+
uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
7879
with:
7980
category: "/language:go"

‎.github/workflows/e2e.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
steps:
4545
-
4646
name: Checkout
47-
uses: actions/checkout@v6
47+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4848
-
4949
name: Update daemon.json
5050
run: |
@@ -63,7 +63,7 @@ jobs:
6363
docker info
6464
-
6565
name: Set up Docker Buildx
66-
uses: docker/setup-buildx-action@v4
66+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
6767
-
6868
name: Run ${{ matrix.target }}
6969
run: |
@@ -74,7 +74,7 @@ jobs:
7474
TESTFLAGS: -coverprofile=/tmp/coverage/coverage.txt
7575
-
7676
name: Send to Codecov
77-
uses: codecov/codecov-action@v5
77+
uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
7878
with:
7979
files: ./build/coverage/coverage.txt
8080
token: ${{ secrets.CODECOV_TOKEN }}

‎.github/workflows/test.yml‎

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,15 +30,15 @@ jobs:
3030
steps:
3131
-
3232
name: Set up Docker Buildx
33-
uses: docker/setup-buildx-action@v4
33+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
3434
-
3535
name: Test
36-
uses: docker/bake-action@v7
36+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7
3737
with:
3838
targets: test-coverage
3939
-
4040
name: Send to Codecov
41-
uses: codecov/codecov-action@v5
41+
uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
4242
with:
4343
files: ./build/coverage/coverage.txt
4444
token: ${{ secrets.CODECOV_TOKEN }}
@@ -60,14 +60,15 @@ jobs:
6060
steps:
6161
-
6262
name: Checkout
63-
uses: actions/checkout@v6
63+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
6464
with:
6565
path: ${{ env.GOPATH }}/src/github.com/docker/cli
6666
-
6767
name: Set up Go
68-
uses: actions/setup-go@v6
68+
uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
6969
with:
7070
go-version: "1.25.8"
71+
cache: false
7172
-
7273
name: Test
7374
run: |
@@ -80,7 +81,7 @@ jobs:
8081
shell: bash
8182
-
8283
name: Send to Codecov
83-
uses: codecov/codecov-action@v5
84+
uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5
8485
with:
8586
files: /tmp/coverage.txt
8687
working-directory: ${{ env.GOPATH }}/src/github.com/docker/cli

‎.github/workflows/validate.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
steps:
3939
-
4040
name: Run
41-
uses: docker/bake-action@v7
41+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7
4242
with:
4343
targets: ${{ matrix.target }}
4444

@@ -48,7 +48,7 @@ jobs:
4848
steps:
4949
-
5050
name: Checkout
51-
uses: actions/checkout@v6
51+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5252
-
5353
name: Generate
5454
shell: 'script --return --quiet --command "bash {0}"'
@@ -74,7 +74,7 @@ jobs:
7474
steps:
7575
-
7676
name: Checkout
77-
uses: actions/checkout@v6
77+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7878
-
7979
name: Run
8080
shell: 'script --return --quiet --command "bash {0}"'

0 commit comments

Comments
 (0)