Skip to content

Commit e4f5a87

Browse files
cnkkcnkk
committed
Bump and pin actions
1 parent ec87574 commit e4f5a87

13 files changed

Lines changed: 232 additions & 110 deletions

‎.github/workflows/all-checks-pass.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,6 @@ jobs:
1111
checks: read
1212
steps:
1313
- name: GitHub Checks
14-
uses: poseidon/wait-for-status-checks@v0.6.0
14+
uses: poseidon/wait-for-status-checks@899c768d191b56eef585c18f8558da19e1f3e707 # v0.6.0
1515
with:
16-
token: ${{ secrets.GITHUB_TOKEN }}
16+
token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/build-private-images-ghcr.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ concurrency:
1414
jobs:
1515
build:
1616
if: ${{ github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'preview') }}
17-
runs-on: ubuntu-latest
17+
runs-on: blacksmith-4vcpu-ubuntu-2404
1818

1919
permissions:
2020
contents: read
@@ -23,7 +23,7 @@ jobs:
2323
steps:
2424
- name: Docker meta
2525
id: meta
26-
uses: docker/metadata-action@v5.0.0
26+
uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
2727
env:
2828
DOCKER_METADATA_PR_HEAD_SHA: true
2929
with:
@@ -34,25 +34,23 @@ jobs:
3434
type=ref,event=tag
3535
type=sha
3636
37-
- name: Set up Docker Buildx
38-
uses: docker/setup-buildx-action@v3
37+
- name: Setup Blacksmith Builder
38+
uses: useblacksmith/setup-docker-builder@5241b2e9423e8b1fa37ed6050ecb62d0fb9a4e38 # v1.6.0
3939

4040
- name: Login to GitHub Container Registry
41-
uses: docker/login-action@v3
41+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
4242
with:
4343
registry: ghcr.io
4444
username: ${{ github.actor }}
4545
password: ${{ secrets.GITHUB_TOKEN }}
4646

4747
- name: Build and push
4848
id: docker_build
49-
uses: docker/build-push-action@v6
49+
uses: useblacksmith/build-push-action@30c71162f16ea2c27c3e21523255d209b8b538c1 # v2
5050
with:
5151
push: true
5252
tags: ${{ steps.meta.outputs.tags }}
5353
labels: ${{ steps.meta.outputs.labels }}
54-
cache-from: type=gha
55-
cache-to: type=gha,mode=max
5654
build-args: |
5755
MIX_ENV=prod
5856
BUILD_METADATA=${{ steps.meta.outputs.json }}
@@ -62,7 +60,7 @@ jobs:
6260

6361
- name: Notify team on failure
6462
if: ${{ failure() && github.ref == 'refs/heads/master' }}
65-
uses: fjogeleit/http-request-action@v1
63+
uses: fjogeleit/http-request-action@551353b829c3646756b2ec2b3694f819d7957495 # v2.0.0
6664
with:
6765
url: ${{ secrets.BUILD_NOTIFICATION_URL }}
6866
method: 'POST'
@@ -72,17 +70,19 @@ jobs:
7270
- name: Get first line and Co-Authored-By lines of the commit message
7371
if: ${{ success() && github.ref == 'refs/heads/master' }}
7472
id: commitmsg
73+
env:
74+
COMMIT_MSG: ${{ github.event.head_commit.message }}
7575
run: |
76-
first_line=$(echo "${{ github.event.head_commit.message }}" | head -n1)
77-
co_authors=$(echo "${{ github.event.head_commit.message }}" | grep -h 'Co-authored-by:' | sort -u | cut -d: -f2- | paste -sd, -)
76+
first_line=$(printf '%s\n' "$COMMIT_MSG" | head -n1 | xargs)
77+
co_authors=$(printf '%s\n' "$COMMIT_MSG" | grep -h 'Co-authored-by:' | sort -u | cut -d: -f2- | paste -sd, - | xargs)
7878
{
7979
echo "first_line=$first_line"
8080
echo "co_authors=$co_authors"
8181
} >> $GITHUB_OUTPUT
8282
8383
- name: Notify team on success
8484
if: ${{ success() && github.ref == 'refs/heads/master' }}
85-
uses: fjogeleit/http-request-action@v1
85+
uses: fjogeleit/http-request-action@551353b829c3646756b2ec2b3694f819d7957495 # v2.0.0
8686
with:
8787
url: ${{ secrets.BUILD_NOTIFICATION_URL }}
8888
method: 'POST'

‎.github/workflows/build-public-images-ghcr.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -32,23 +32,23 @@ jobs:
3232
3333
- name: Docker meta
3434
id: meta
35-
uses: docker/metadata-action@v5
35+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
3636
with:
3737
images: ${{ env.GHCR_REPO }}
3838

3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@v3
40+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
4141

4242
- name: Login to GitHub Container Registry
43-
uses: docker/login-action@v3
43+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
4444
with:
4545
registry: ghcr.io
4646
username: ${{ github.actor }}
4747
password: ${{ secrets.GITHUB_TOKEN }}
4848

4949
- name: Build
5050
id: docker_build
51-
uses: docker/build-push-action@v6
51+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
5252
with:
5353
labels: ${{ steps.meta.outputs.labels }}
5454
outputs: type=image,name=${{ env.GHCR_REPO }},push-by-digest=true,name-canonical=true,push=true
@@ -68,7 +68,7 @@ jobs:
6868
touch "${{ runner.temp }}/digests/${digest#sha256:}"
6969
7070
- name: Upload digest
71-
uses: actions/upload-artifact@v6
71+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
7272
with:
7373
name: digests-${{ env.PLATFORM_PAIR }}
7474
path: ${{ runner.temp }}/digests/*
@@ -77,7 +77,7 @@ jobs:
7777

7878
- name: Notify team on failure
7979
if: ${{ failure() }}
80-
uses: fjogeleit/http-request-action@v1
80+
uses: fjogeleit/http-request-action@551353b829c3646756b2ec2b3694f819d7957495 # v2.0.0
8181
with:
8282
url: ${{ secrets.BUILD_NOTIFICATION_URL }}
8383
method: "POST"
@@ -91,21 +91,21 @@ jobs:
9191

9292
steps:
9393
- name: Download digests
94-
uses: actions/download-artifact@v7
94+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
9595
with:
9696
path: ${{ runner.temp }}/digests
9797
pattern: digests-*
9898
merge-multiple: true
9999

100-
- uses: docker/login-action@v3
100+
- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
101101
with:
102102
registry: ghcr.io
103103
username: ${{ github.actor }}
104104
password: ${{ secrets.GITHUB_TOKEN }}
105105

106-
- uses: docker/setup-buildx-action@v3
106+
- uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
107107

108-
- uses: docker/metadata-action@v5
108+
- uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
109109
id: meta
110110
with:
111111
images: ${{ env.GHCR_REPO }}

‎.github/workflows/codespell.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,9 @@ jobs:
1010
codespell:
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
14-
- uses: codespell-project/actions-codespell@v2
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
14+
- uses: codespell-project/actions-codespell@406322ec52dd7b488e48c1c4b82e2a8b3a1bf630 # v2.1
1515
with:
1616
check_filenames: true
1717
ignore_words_file: .codespellignore
18-
path: lib test extra
18+
path: lib test extra

‎.github/workflows/comment-preview-url.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Comment with preview URL
19-
uses: thollander/actions-comment-pull-request@v3.0.1
19+
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
2020
with:
2121
message: |
2222
<div align="center">

0 commit comments

Comments
 (0)