Skip to content

Commit 34dd432

Browse files
cheyangcheyang
authored
Support pinned dependencies (#5138)
* Add pinned GithubAction Signed-off-by: cheyang <cheyang@163.com> * Add pinned Docker image Signed-off-by: cheyang <cheyang@163.com> --------- Signed-off-by: cheyang <cheyang@163.com>
1 parent 51894c6 commit 34dd432

12 files changed

Lines changed: 31 additions & 16 deletions

File tree

‎.github/workflows/kind-e2e.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
go-version: ${{ env.GO_VERSION }}
4141

4242
- name: Set up Helm
43-
uses: azure/setup-helm@v4.3.0
43+
uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
4444

4545
- name: Checkout code
4646
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -73,7 +73,7 @@ jobs:
7373
7474
- name: Dump environment
7575
if: ${{ !cancelled() }}
76-
uses: actions/upload-artifact@v4
76+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
7777
with:
7878
name: gha-e2e-logs-${{ github.job }}-${{ matrix.kubernetes-version }}
7979
path: "src/github.com/fluid-cloudnative/fluid/e2e-tmp/testcase-*.tgz"

‎.github/workflows/project-check.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
20-
- uses: dominikh/staticcheck-action@v1
20+
- uses: dominikh/staticcheck-action@fe1dd0c3658873b46f8c9bb3291096a617310ca6 # v1
2121

2222
lint:
2323
runs-on: ubuntu-latest
@@ -29,7 +29,7 @@ jobs:
2929
working-directory: ${{ env.GOPATH }}/src/github.com/fluid-cloudnative/fluid
3030
steps:
3131
- name: Set up Go
32-
uses: actions/setup-go@v5
32+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
3333
with:
3434
go-version: ${{ env.GO_VERSION }}
3535

@@ -84,7 +84,7 @@ jobs:
8484
runs-on: ubuntu-latest
8585
steps:
8686
- name: Set up Go
87-
uses: actions/setup-go@v5
87+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
8888
with:
8989
go-version: ${{ env.GO_VERSION }}
9090

‎addons/cubefs/v2.4/docker/Dockerfile‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM chubaofs/cfs-client:2.4.0
1+
FROM chubaofs/cfs-client:2.4.0@sha256:2035c53400c4b065e8706f0cc48660ab1c9be342560600abb0e6a69dbee3eb41
2+
# FROM chubaofs/cfs-client:2.4.0
23

34
COPY fluid_config_init.py /
45
COPY entrypoint.sh /usr/local/bin

‎addons/cubefs/v3.2/docker/Dockerfile‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM chubaofs/cfs-client:v3.2.0
1+
#FROM chubaofs/cfs-client:v3.2.0
2+
FROM chubaofs/cfs-client:v3.2.0@sha256:8254359f256164c67825bb6a035ce77baa773ee0775f7346f29fffabea6b97d2
23

34
COPY fluid_config_init.py /
45
COPY entrypoint.sh /usr/local/bin

‎addons/dynamic-mount/base/Dockerfile‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,12 @@ FROM debian:bullseye@sha256:a165446a88794db4fec31e35e9441433f9552ae048fb1ed26df3
33
RUN apt update && \
44
apt install -y build-essential git libfuse3-dev pkg-config python3-pip
55

6-
RUN pip install meson ninja
6+
# RUN pip install meson ninja
7+
RUN pip install meson==1.8.2 \
8+
--hash=sha256:f4e2b651a4d38c918a3e0a2f0e5a8d0d7c8046c8c8f1a8b7a0a3b5e0c8d1d0f1 \
9+
ninja==1.11.1.4 \
10+
--hash=sha256:5713cf50c5be50084a8693308a63ecf9e55c3132a78a41ab1363a28b6caaaee1
11+
712

813
RUN git clone https://github.com/libfuse/libfuse.git && cd libfuse && git checkout fuse-3.16.2 && cd ..
914

‎addons/dynamic-mount/juicefs/docker/Dockerfile.juicefs‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM fluidcloudnative/fluid-dynamic-mount-base:v0.4
1+
# FROM fluidcloudnative/fluid-dynamic-mount-base:v0.4
2+
FROM fluidcloudnative/fluid-dynamic-mount-base:v0.4@sha256:b4c037b23d96d40ee67f1a578e6193c369fdbb12c38134725ca353babe3a30cd
23

34
# Install Juicefs
45
WORKDIR /app

‎addons/nfs/docker/Dockerfile‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
# Build environment
2-
FROM ubuntu:jammy as BUILD
2+
# FROM ubuntu:jammy as BUILD
3+
FROM ubuntu:jammy@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eeey as BUILD
34
RUN apt update && \
45
apt install --yes automake libfuse-dev libnfs-dev libnfs-dev libnfs13 libtool libtool m4 make xsltproc
56

@@ -11,7 +12,8 @@ RUN ./setup.sh && \
1112
make
1213

1314
# Production image
14-
FROM ubuntu:jammy
15+
# FROM ubuntu:jammy as BUILD
16+
FROM ubuntu:jammy@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eee
1517
RUN apt update && \
1618
apt install --yes bash fuse libfuse2 libnfs13 python3 && \
1719
apt clean autoclean && \

‎charts/alluxio/docker/init-users/Dockerfile‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM centos:centos8.2.2004
1+
# FROM centos:centos8.2.2004
2+
FROM centos:centos8.2.2004@sha256:4062bbdd1bb0801b0aa38e0f83dece70fb7a5e9bce223423a68de2d8b784b43b
23

34
COPY *.sh /
45

‎charts/goosefs/docker/init-users/Dockerfile‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM centos:centos8.2.2004
1+
# FROM centos:centos8.2.2004
2+
FROM centos:centos8.2.2004@sha256:4062bbdd1bb0801b0aa38e0f83dece70fb7a5e9bce223423a68de2d8b784b43b
23

34
RUN yum install -y net-tools
45

‎samples/knative/docker/Dockerfile‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM registry.cn-hangzhou.aliyuncs.com/knative-sample/helloworld-go:160e4dc8
1+
# FROM registry.cn-hangzhou.aliyuncs.com/knative-sample/helloworld-go:160e4dc8
2+
FROM registry.cn-hangzhou.aliyuncs.com/knative-sample/helloworld-go:160e4dc8@sha256:032b801f148d959016bd30362c01df96edcaea524182c6b8c07f9ea155f2f44d
23

34
RUN apk add bash
45

0 commit comments

Comments
 (0)