@@ -60,15 +60,15 @@ jobs:
6060 contents : read
6161 steps :
6262 - name : Checkout code
63- uses : actions/checkout@v6
63+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6464 with :
6565 ref : ${{ inputs.ref }}
6666
6767 # For main branch/releases we want to tag with the major version.
6868 # E.g. if we build version 1.9.2 we want to tag with 1.9.2 and 1.9.
6969 - name : Determine major version tag
7070 id : determine-major-version
71- uses : frabert/replace-string-action@v2.5
71+ uses : frabert/replace-string-action@fc6c5eb9238279ae230de582075b1a29f93cfa6b # v2.5.2
7272 with :
7373 pattern : ' ^(\d+\.\d+).*$'
7474 string : ${{ inputs.version }}
@@ -98,24 +98,24 @@ jobs:
9898 runs-on : ${{ (contains(matrix.platform, 'arm') && 'ubuntu-22.04-arm') || 'ubuntu-latest' }}
9999 steps :
100100 - name : Checkout code
101- uses : actions/checkout@v6
101+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
102102 with :
103103 ref : ${{ inputs.ref }}
104104 token : ${{ secrets.token }}
105105
106106 - name : Set up Docker Buildx
107- uses : docker/setup-buildx-action@v4
107+ uses : docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
108108
109109 - name : Log in to the Container registry
110- uses : docker/login-action@v4
110+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
111111 with :
112112 registry : ${{ inputs.registry }}
113113 username : ${{ github.actor }}
114114 password : ${{ secrets.token }}
115115
116116 - name : Build and push by digest the standard ${{ matrix.target }} image
117117 id : build
118- uses : docker/build-push-action@v7
118+ uses : docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
119119 with :
120120 # Use path context rather than Git context as we want local files
121121 file : ./dockerfiles/Dockerfile
@@ -141,7 +141,7 @@ jobs:
141141 shell : bash
142142
143143 - name : Upload ${{ matrix.target }} digest
144- uses : actions/upload-artifact@v7
144+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
145145 with :
146146 name : ${{ matrix.target }}-digests-${{ (contains(matrix.platform, 'arm/v7') && 'arm-v7') || matrix.platform }}
147147 path : /tmp/digests/*
@@ -164,7 +164,7 @@ jobs:
164164 steps :
165165 - name : Extract metadata from Github
166166 id : meta
167- uses : docker/metadata-action@v5
167+ uses : docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
168168 with :
169169 images : ${{ inputs.registry }}/${{ inputs.image }}
170170 tags : |
@@ -173,17 +173,17 @@ jobs:
173173 raw,latest
174174
175175 - name : Download production digests
176- uses : actions/download-artifact@v8
176+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
177177 with :
178178 pattern : production-digests-*
179179 path : /tmp/production-digests
180180 merge-multiple : true
181181
182182 - name : Set up Docker Buildx
183- uses : docker/setup-buildx-action@v4
183+ uses : docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
184184
185185 - name : Log in to the Container registry
186- uses : docker/login-action@v4
186+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
187187 with :
188188 registry : ${{ inputs.registry }}
189189 username : ${{ github.actor }}
@@ -216,7 +216,7 @@ jobs:
216216 version : ${{ steps.debug-meta.outputs.version }}
217217 steps :
218218 - id : debug-meta
219- uses : docker/metadata-action@v5
219+ uses : docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
220220 with :
221221 images : ${{ inputs.registry }}/${{ inputs.image }}
222222 tags : |
@@ -225,17 +225,17 @@ jobs:
225225 raw,latest-debug
226226
227227 - name : Download debug digests
228- uses : actions/download-artifact@v8
228+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
229229 with :
230230 pattern : debug-digests-*
231231 path : /tmp/debug-digests
232232 merge-multiple : true
233233
234234 - name : Set up Docker Buildx
235- uses : docker/setup-buildx-action@v4
235+ uses : docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
236236
237237 - name : Log in to the Container registry
238- uses : docker/login-action@v4
238+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
239239 with :
240240 registry : ${{ inputs.registry }}
241241 username : ${{ github.actor }}
@@ -265,7 +265,7 @@ jobs:
265265 packages : read
266266 steps :
267267 - name : Log in to the Container registry
268- uses : docker/login-action@v4
268+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
269269 with :
270270 registry : ${{ inputs.registry }}
271271 username : ${{ inputs.username }}
@@ -278,7 +278,7 @@ jobs:
278278 shell : bash
279279
280280 - name : Upload the schema
281- uses : actions/upload-artifact@v7
281+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
282282 with :
283283 path : ./fluent-bit-schema*.json
284284 name : fluent-bit-schema-${{ inputs.version }}
@@ -297,7 +297,7 @@ jobs:
297297 packages : read
298298 steps :
299299 - name : Log in to the Container registry
300- uses : docker/login-action@v4
300+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
301301 with :
302302 registry : ${{ inputs.registry }}
303303 username : ${{ inputs.username }}
@@ -314,7 +314,7 @@ jobs:
314314 severity : " CRITICAL,HIGH"
315315
316316 - name : Dockle - multi-arch
317- uses : hands-lab/dockle-action@v1
317+ uses : hands-lab/dockle-action@083a964bbcffa92bdd5f85fe3672da5d81ae1a57 # v1
318318 with :
319319 image : " ${{ inputs.registry }}/${{ inputs.image }}:${{ inputs.version }}"
320320 exit-code : " 1"
@@ -337,7 +337,7 @@ jobs:
337337 environment : ${{ inputs.environment }}
338338 steps :
339339 - name : Install cosign
340- uses : sigstore/cosign-installer@v2
340+ uses : sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
341341
342342 - name : Cosign keyless signing using Rektor public transparency log
343343 # This step uses the identity token to provision an ephemeral certificate
@@ -399,15 +399,15 @@ jobs:
399399 IMAGE : ${{ inputs.registry }}/${{ inputs.image }}:windows-${{ matrix.windows-base-version }}-${{ inputs.version }}
400400 steps :
401401 - name : Checkout repository
402- uses : actions/checkout@v6
402+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
403403 with :
404404 ref : ${{ inputs.ref }}
405405
406406 # - name: Set up Docker Buildx
407407 # uses: docker/setup-buildx-action@v4
408408
409409 - name : Log in to the Container registry
410- uses : docker/login-action@v4
410+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
411411 with :
412412 registry : ${{ inputs.registry }}
413413 username : ${{ inputs.username }}
0 commit comments