From e1217d3758099a4bb0145898142371da625ff634 Mon Sep 17 00:00:00 2001 From: "hashicorp-tsccr[bot]" <129506189+hashicorp-tsccr[bot]@users.noreply.github.com> Date: Mon, 5 Aug 2024 11:54:48 +0200 Subject: [PATCH] chore(deps): pin trusted workflows based on HashiCorp TSCCR (#3682) Bumping GitHub Actions version to latest TSCCR release. Co-authored-by: hashicorp-tsccr[bot] --- .github/workflows/docker.yml | 2 +- .github/workflows/integration.yml | 2 +- .github/workflows/provider-integration.yml | 2 +- .github/workflows/registry-docs-pr-based.yml | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index bf69f59732..c938cb2a91 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -46,7 +46,7 @@ jobs: GIT_SHA=$(git rev-parse HEAD) echo "git-sha=$GIT_SHA" >> $GITHUB_OUTPUT - name: Build and push - uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0 + uses: docker/build-push-action@1ca370b3a9802c92e886402e0dd88098a2533b12 # v6.4.1 with: pull: true push: true diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 87fa36ea62..b69f7b8777 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -219,7 +219,7 @@ jobs: - name: Install pipenv run: pip install pipenv - name: Install Go - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: go-version: 1.18.x cache: false # This is disabled because we don't have a go.sum file and setup-go expects it to use caching. Thus, caching is always broken anyways diff --git a/.github/workflows/provider-integration.yml b/.github/workflows/provider-integration.yml index 64b5588a4a..57b6150df4 100644 --- a/.github/workflows/provider-integration.yml +++ b/.github/workflows/provider-integration.yml @@ -156,7 +156,7 @@ jobs: - name: Install pipenv run: pip install pipenv - name: Install Go - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: go-version: 1.16.x - name: Download dist diff --git a/.github/workflows/registry-docs-pr-based.yml b/.github/workflows/registry-docs-pr-based.yml index e0013a11a1..eb0d98aec6 100644 --- a/.github/workflows/registry-docs-pr-based.yml +++ b/.github/workflows/registry-docs-pr-based.yml @@ -117,7 +117,7 @@ jobs: token: ${{ secrets.GH_PR_TOKEN }} - name: Setup Node.js - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version: "18.x" @@ -162,7 +162,7 @@ jobs: git config --global --add safe.directory $(pwd) - name: Setup Node.js - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version: "18.x"