@@ -31,28 +31,28 @@ jobs:
3131 steps :
3232
3333 - name : Checkout repository
34- uses : actions/checkout@v3
34+ uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
3535
3636 # Install the cosign tool except on PR
3737 # https://github.com/sigstore/cosign-installer
3838 - name : Install cosign
3939 if : github.event_name != 'pull_request'
40- uses : sigstore/cosign-installer@v3.1.2
40+ uses : sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
4141 with :
42- cosign-release : ' v2.1.1 '
42+ cosign-release : ' v2.2.2 '
4343
4444
4545 # Set up BuildKit Docker container builder to be able to build
4646 # multi-platform images and export cache
4747 # https://github.com/docker/setup-buildx-action
4848 - name : Set up Docker Buildx
49- uses : docker/setup-buildx-action@v3.0.0
49+ uses : docker/setup-buildx-action@0d103c3126aa41d772a8362f6aa67afac040f80c
5050
5151 # Login against a Docker registry except on PR
5252 # https://github.com/docker/login-action
5353 - name : Log into registry ${{ env.REGISTRY }}
5454 if : github.event_name != 'pull_request'
55- uses : docker/login-action@v3.0.0
55+ uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d
5656 with :
5757 registry : ${{ env.REGISTRY }}
5858 username : ${{ github.actor }}
@@ -63,11 +63,11 @@ jobs:
6363 # https://github.com/docker/metadata-action
6464 - name : Extract Docker metadata
6565 id : meta
66- uses : docker/metadata-action@v5.0.0
66+ uses : docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
6767 with :
6868 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
6969
70- - uses : ScribeMD/docker-cache@0.3.6
70+ - uses : ScribeMD/docker-cache@e481e638abdb45e2fa30845305c387a544cc617f
7171 name : Cache Docker images
7272 with :
7373 key : docker-${{ runner.os }}
7676 # https://github.com/docker/build-push-action
7777 - name : Build and push Docker image
7878 id : build-and-push
79- uses : docker/build-push-action@v5.0.0
79+ uses : docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
8080 with :
8181 context : .
8282 push : ${{ github.event_name != 'pull_request' }}
0 commit comments