Change workflow action versions to commit shas

primer-io · Mar 19, 2024 · f73b15b · f73b15b
1 parent 7bcb996
commit f73b15b
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 11 deletions.
diff --git a/.github/workflows/build_test.yml b/.github/workflows/build_test.yml
@@ -12,9 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     name: "Run Danger"
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Danger
-        uses: docker://ghcr.io/danger/danger-swift:3.13.0
+        uses: docker://ghcr.io/danger/danger-swift@sha256:36fc10dd9d02f09cf61cad6231a3f414d0d997d2 # 3.13.0
         with:
             args: --failOnErrors --no-publish-check --remove-previous-comments
         env:
@@ -26,17 +26,17 @@ jobs:
     name: "Build and test"
     steps:
       - name: Cancel previous jobs
-        uses: styfle/[email protected]
+        uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5 # 0.11.0
         with:
           access_token: ${{ github.token }}
 
       - name: Git - Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           ref: ${{ github.ref }}
 
       - name: Select Xcode Version
-        uses: maxim-lobanov/setup-xcode@v1
+        uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
         with:
           xcode-version: '15.0' 
 
@@ -51,13 +51,13 @@ jobs:
       #   with:
       #     ssh-private-key: ${{ secrets.SSH_KEY }}
 
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@22fdc77bf4148f810455b226c90fb81b5cbc00a7 # v1.172.0
         with:
           ruby-version: "3.2.2"
           bundler-cache: true
 
       - name: Setup node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3.8.2
         with:
           node-version: 18.3.0
 

diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
@@ -19,7 +19,7 @@ jobs:
     name: "Bump release version and create changelog"
     steps:
       - name: Check out repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           fetch-depth: 0
           token: ${{ secrets.RELEASE_ACCESS_TOKEN }}
@@ -44,7 +44,7 @@ jobs:
         run: |
           echo "TO_VERSION=$(cz version --project)" >> $GITHUB_ENV
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           token: ${{ secrets.RELEASE_ACCESS_TOKEN }}
           base: main

diff --git a/.github/workflows/post-release-merge.yml b/.github/workflows/post-release-merge.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Git - Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           token: ${{ secrets.RELEASE_ACCESS_TOKEN }}
@@ -26,7 +26,7 @@ jobs:
       - name: Record changelog for current release
         run: cz changelog $FROM_VERSION..$RELEASE_VERSION --file-name="release.md"
       - name: Create release
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
         with:
           name: "Release ${{ env.RELEASE_VERSION }}"
           tag: ${{ env.RELEASE_VERSION }}