chore(deps): pin dependencies

go-vela · Sep 27, 2023 · fe0b4a8 · fe0b4a8
1 parent 0681f7e
commit fe0b4a8
Show file tree

Hide file tree

Showing 10 changed files with 18 additions and 18 deletions.
diff --git a/.github/workflows/bash.yml b/.github/workflows/bash.yml
@@ -15,10 +15,10 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:bash
         workdir: plugins/bash

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -15,10 +15,10 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: install go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3
       with:
         go-version: '>=1.19.0'
 
@@ -34,7 +34,7 @@ jobs:
           plugins/go/main.go
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:go
         workdir: plugins/go

diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: install node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
       with:
         node-version: 16
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:node
         workdir: plugins/node.js

diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: setup python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
       with:
         python-version: '3.10'
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:python
         workdir: plugins/python

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
     - name: clone
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     - name: setup ruby
       uses: ruby/setup-ruby@v1
       with:
         ruby-version: '3.0'
 
     - name: docker
-      uses: elgohr/Publish-Docker-Github-Action@v4
+      uses: elgohr/Publish-Docker-Github-Action@742a180fa47f3adfb5115902ae4955acc6ad769b # v4
       with:
         name: target/vela-sample:ruby
         workdir: plugins/ruby

diff --git a/plugins/bash/Dockerfile b/plugins/bash/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine@sha256:7144f7bab3d4c2648d7e59409f15ec52a18006a128c733fcff20d3a4a54ba44a
 
 RUN apk add --update --no-cache bash ca-certificates curl
 

diff --git a/plugins/go/Dockerfile b/plugins/go/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:alpine
+FROM golang:alpine@sha256:ec31b7fbaf32583af4f4f8c9e0cabc651247624bf962adbb7fa1b54c9c03d5e4
 
 RUN apk add --update --no-cache ca-certificates
 

diff --git a/plugins/node.js/Dockerfile b/plugins/node.js/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:alpine
+FROM node:alpine@sha256:a329b146bcc99a36caa73056e60714d0911ca5c229ade3eb27e9283dc78c9eb6
 
 RUN apk add --update --no-cache ca-certificates
 

diff --git a/plugins/python/Dockerfile b/plugins/python/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:alpine
+FROM python:alpine@sha256:5d769f990397afbb2aca24b0655e404c0f2806d268f454b052e81e39d87abf42
 
 RUN apk add --update --no-cache ca-certificates
 

diff --git a/plugins/ruby/Dockerfile b/plugins/ruby/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:alpine
+FROM ruby:alpine@sha256:ee39ade2cbda43fd466d787a595f142c9fa318284dd1d6b3e2f9590a9f4f75ab
 
 RUN apk add --update --no-cache ca-certificates