Skip to content

Commit 6b3f257

Browse files
github-security-botgithub-security-bot
committed
Pin GitHub Actions to commit SHAs
1 parent 78403c4 commit 6b3f257

4 files changed

Lines changed: 21 additions & 19 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ updates:
44
directory: "/"
55
schedule:
66
interval: "monthly"
7+
cooldown:
8+
default-days: 7
79
- package-ecosystem: "gomod"
810
directory: "/"
911
schedule:

‎.github/workflows/ci.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -15,15 +15,15 @@ jobs:
1515
runs-on: ubuntu-24.04
1616
steps:
1717
- name: Checkout
18-
uses: actions/checkout@v4
18+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
1919
- name: Setup Go
20-
uses: actions/setup-go@v5
20+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
2121
with:
2222
go-version-file: ./go.mod
2323
- name: Install Pkger
2424
run: go install --mod=readonly github.com/markbates/pkger/cmd/pkger
2525
- name: Build
26-
uses: goreleaser/goreleaser-action@v6
26+
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
2727
with:
2828
version: latest
2929
args: --clean --snapshot
@@ -33,9 +33,9 @@ jobs:
3333
runs-on: ubuntu-24.04
3434
steps:
3535
- name: Checkout
36-
uses: actions/checkout@v4
36+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
3737
- name: Setup Go
38-
uses: actions/setup-go@v5
38+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
3939
with:
4040
go-version-file: ./go.mod
4141
- name: Test
@@ -47,9 +47,9 @@ jobs:
4747
if: ${{ github.event != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
4848
steps:
4949
- name: Checkout
50-
uses: actions/checkout@v4
50+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
5151
- name: Setup Go
52-
uses: actions/setup-go@v5
52+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
5353
with:
5454
go-version-file: ./go.mod
5555
- name: Build
@@ -64,9 +64,9 @@ jobs:
6464
runs-on: ubuntu-24.04
6565
steps:
6666
- name: Checkout
67-
uses: actions/checkout@v4
67+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
6868
- name: Setup Go
69-
uses: actions/setup-go@v5
69+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
7070
with:
7171
go-version-file: ./go.mod
7272
- name: Check Modules
@@ -77,7 +77,7 @@ jobs:
7777
exit 1
7878
fi
7979
- name: Lint
80-
uses: golangci/golangci-lint-action@v8
80+
uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
8181
with:
8282
version: v2.1.6
8383

@@ -86,13 +86,13 @@ jobs:
8686
runs-on: ubuntu-24.04
8787
steps:
8888
- name: Checkout
89-
uses: actions/checkout@v4
89+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
9090
- name: Setup Go
91-
uses: actions/setup-go@v5
91+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
9292
with:
9393
go-version-file: ./go.mod
9494
- name: Setup licensedci
95-
uses: jonabc/setup-licensed@v1
95+
uses: jonabc/setup-licensed@d6b3a6f7058c2b40c06d205e13e15c2418977566 # v1.1.4
9696
with:
9797
version: 2.x
9898
- name: Run licensedci

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,14 +17,14 @@ jobs:
1717

1818
steps:
1919
- name: Checkout
20-
uses: actions/checkout@v4
20+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
2121
with:
2222
fetch-depth: 2
2323
- run: git checkout HEAD^2
2424
if: ${{ github.event_name == 'pull_request' }}
2525
- name: Initialize CodeQL
26-
uses: github/codeql-action/init@v3
26+
uses: github/codeql-action/init@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3.38.0
2727
with:
2828
languages: go
2929
- name: Perform CodeQL Analysis
30-
uses: github/codeql-action/analyze@v3
30+
uses: github/codeql-action/analyze@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3.38.0

‎.github/workflows/release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,17 +11,17 @@ jobs:
1111
runs-on: ubuntu-24.04
1212
steps:
1313
- name: Checkout
14-
uses: actions/checkout@v4
14+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
1515
with:
1616
fetch-depth: 0
1717
- name: Setup Go
18-
uses: actions/setup-go@v5
18+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
1919
with:
2020
go-version-file: ./go.mod
2121
- name: Install Pkger
2222
run: go install --mod=readonly github.com/markbates/pkger/cmd/pkger
2323
- name: Release
24-
uses: goreleaser/goreleaser-action@v6
24+
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
2525
with:
2626
version: latest
2727
args: release --clean

0 commit comments

Comments
 (0)