@@ -43,15 +43,15 @@ jobs:
4343 runs-on : ubuntu-latest
4444 steps :
4545 - name : Checkout
46- uses : actions/checkout@v7
46+ uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
4747
48- - uses : actions/setup-go@v6
48+ - uses : actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
4949 with :
5050 go-version : ' 1.26'
5151
5252 - name : Cache Musl
5353 id : cache-musl
54- uses : actions/cache@v6
54+ uses : actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
5555 with :
5656 path : build/musl-libs
5757 key : docker-musl-libs-v2
6969 FRONTEND_REPO : ${{ vars.FRONTEND_REPO }}
7070
7171 - name : Upload artifacts
72- uses : actions/upload-artifact@v7
72+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
7373 with :
7474 name : ${{ env.ARTIFACT_NAME }}
7575 overwrite : true
@@ -83,15 +83,15 @@ jobs:
8383 runs-on : ubuntu-latest
8484 steps :
8585 - name : Checkout
86- uses : actions/checkout@v7
86+ uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
8787
88- - uses : actions/setup-go@v6
88+ - uses : actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
8989 with :
9090 go-version : ' 1.26.4'
9191
9292 - name : Cache Musl
9393 id : cache-musl
94- uses : actions/cache@v6
94+ uses : actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
9595 with :
9696 path : build/musl-libs
9797 key : docker-musl-libs-v2
@@ -109,7 +109,7 @@ jobs:
109109 FRONTEND_REPO : ${{ vars.FRONTEND_REPO }}
110110
111111 - name : Upload artifacts
112- uses : actions/upload-artifact@v7
112+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
113113 with :
114114 name : ${{ env.ARTIFACT_NAME_LITE }}
115115 overwrite : true
@@ -146,36 +146,36 @@ jobs:
146146 tag_favor : " suffix=-aio,onlatest=true"
147147 steps :
148148 - name : Checkout
149- uses : actions/checkout@v7
150- - uses : actions/download-artifact@v8
149+ uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
150+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
151151 with :
152152 name : ${{ env.ARTIFACT_NAME }}
153153 path : ' build/'
154154
155155 - name : Set up QEMU
156- uses : docker/setup-qemu-action@v3
156+ uses : docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
157157
158158 - name : Set up Docker Buildx
159- uses : docker/setup-buildx-action@v3
159+ uses : docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
160160
161161 - name : Login to GitHub Container Registry
162162 if : env.IMAGE_PUSH == 'true'
163- uses : docker/login-action@v3
163+ uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
164164 with :
165165 registry : ${{ env.REGISTRY }}
166166 username : ${{ github.actor }}
167167 password : ${{ secrets.GITHUB_TOKEN }}
168168
169169 - name : Login to DockerHub Container Registry
170170 if : env.IMAGE_PUSH == 'true'
171- uses : docker/login-action@v3
171+ uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
172172 with :
173173 username : ${{ vars.DOCKERHUB_ORG_NAME_BACKUP || env.DOCKERHUB_ORG_NAME }}
174174 password : ${{ secrets.DOCKERHUB_TOKEN }}
175175
176176 - name : Docker meta
177177 id : meta
178- uses : docker/metadata-action@v5
178+ uses : docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
179179 with :
180180 images : |
181181 ${{ env.REGISTRY }}/${{ env.GHCR_ORG_NAME }}/${{ env.IMAGE_NAME }}
@@ -190,7 +190,7 @@ jobs:
190190
191191 - name : Build and push
192192 id : docker_build
193- uses : docker/build-push-action@v6
193+ uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
194194 with :
195195 context : .
196196 file : Dockerfile.ci
@@ -230,36 +230,36 @@ jobs:
230230 tag_favor : " suffix=-lite-aio,onlatest=true"
231231 steps :
232232 - name : Checkout
233- uses : actions/checkout@v7
234- - uses : actions/download-artifact@v8
233+ uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
234+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
235235 with :
236236 name : ${{ env.ARTIFACT_NAME_LITE }}
237237 path : ' build/'
238238
239239 - name : Set up QEMU
240- uses : docker/setup-qemu-action@v3
240+ uses : docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
241241
242242 - name : Set up Docker Buildx
243- uses : docker/setup-buildx-action@v3
243+ uses : docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
244244
245245 - name : Login to GitHub Container Registry
246246 if : env.IMAGE_PUSH == 'true'
247- uses : docker/login-action@v3
247+ uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
248248 with :
249249 registry : ${{ env.REGISTRY }}
250250 username : ${{ github.actor }}
251251 password : ${{ secrets.GITHUB_TOKEN }}
252252
253253 - name : Login to DockerHub Container Registry
254254 if : env.IMAGE_PUSH == 'true'
255- uses : docker/login-action@v3
255+ uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
256256 with :
257257 username : ${{ vars.DOCKERHUB_ORG_NAME_BACKUP || env.DOCKERHUB_ORG_NAME }}
258258 password : ${{ secrets.DOCKERHUB_TOKEN }}
259259
260260 - name : Docker meta
261261 id : meta
262- uses : docker/metadata-action@v5
262+ uses : docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
263263 with :
264264 images : |
265265 ${{ env.REGISTRY }}/${{ env.GHCR_ORG_NAME }}/${{ env.IMAGE_NAME }}
@@ -274,7 +274,7 @@ jobs:
274274
275275 - name : Build and push
276276 id : docker_build
277- uses : docker/build-push-action@v6
277+ uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
278278 with :
279279 context : .
280280 file : Dockerfile.ci
0 commit comments