Pin dependencies

LibOps · Jan 17, 2025 · fcc0cef · fcc0cef
1 parent a315a6c
commit fcc0cef
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 19 deletions.
diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml
@@ -21,21 +21,21 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
     - name: Install Terraform
-      uses: hashicorp/setup-terraform@v3
+      uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
       with:
         terraform_version: 1.5.7
 
     - name: Set up Cloud SDK
-      uses: google-github-actions/setup-gcloud@v1
+      uses: google-github-actions/setup-gcloud@e30db14379863a8c79331b04a9969f4c1e225e0b # v1
       with:
         version: 'latest'
 
     - name: Authenticate to Google Cloud
       id: 'auth'
-      uses: google-github-actions/auth@v1
+      uses: google-github-actions/auth@3a3c4c57d294ef65efaaee4ff17b22fa88dd3c69 # v1
       with:
         workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
         service_account: ${{ secrets.GSA }}
@@ -46,7 +46,7 @@ jobs:
         gcloud config set project ${{ secrets.GCLOUD_PROJECT }}
         gcloud config set disable_prompts true
 
-    - uses: 'docker/login-action@v3'
+    - uses: 'docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567' # v3
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'

diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml
@@ -17,10 +17,10 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
     - name: Install Terraform
-      uses: hashicorp/setup-terraform@v3
+      uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
       with:
         terraform_version: 1.5.7
 
@@ -29,13 +29,13 @@ jobs:
       shell: bash
 
     - name: Set up Cloud SDK
-      uses: google-github-actions/setup-gcloud@v1
+      uses: google-github-actions/setup-gcloud@e30db14379863a8c79331b04a9969f4c1e225e0b # v1
       with:
         version: 'latest'
 
     - name: Authenticate to Google Cloud
       id: 'auth'
-      uses: google-github-actions/auth@v1
+      uses: google-github-actions/auth@3a3c4c57d294ef65efaaee4ff17b22fa88dd3c69 # v1
       with:
         workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
         service_account: ${{ secrets.GSA }}
@@ -46,7 +46,7 @@ jobs:
         gcloud config set project ${{ secrets.GCLOUD_PROJECT }}
         gcloud config set disable_prompts true
 
-    - uses: 'docker/login-action@v3'
+    - uses: 'docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567' # v3
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'
@@ -67,7 +67,7 @@ jobs:
       continue-on-error: true
 
     - name: Post comment with Terraform plan
-      uses: actions/github-script@v5
+      uses: actions/github-script@211cb3fefb35a799baa5156f9321bb774fe56294 # v5
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         script: |

diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
@@ -13,17 +13,17 @@ jobs:
       contents: read
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Authenticate to Google Cloud
         id: 'auth'
-        uses: google-github-actions/auth@v1
+        uses: google-github-actions/auth@3a3c4c57d294ef65efaaee4ff17b22fa88dd3c69 # v1
         with:
           workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
           service_account: ${{ secrets.GSA }}
           token_format: 'access_token'
 
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         name: 'Docker login'
         with:
           registry: 'us-docker.pkg.dev'

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -16,10 +16,10 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
     - name: Install Terraform
-      uses: hashicorp/setup-terraform@v3
+      uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
       with:
         terraform_version: 1.5.7
 
@@ -28,13 +28,13 @@ jobs:
       shell: bash
 
     - name: Set up Cloud SDK
-      uses: google-github-actions/setup-gcloud@v1
+      uses: google-github-actions/setup-gcloud@e30db14379863a8c79331b04a9969f4c1e225e0b # v1
       with:
         version: 'latest'
 
     - name: Authenticate to Google Cloud
       id: 'auth'
-      uses: google-github-actions/auth@v1
+      uses: google-github-actions/auth@3a3c4c57d294ef65efaaee4ff17b22fa88dd3c69 # v1
       with:
         workload_identity_provider: ${{ secrets.GCLOUD_OIDC_POOL }}
         service_account: ${{ secrets.GSA }}
@@ -45,7 +45,7 @@ jobs:
         gcloud config set project ${{ secrets.GCLOUD_PROJECT }}
         gcloud config set disable_prompts true
 
-    - uses: 'docker/login-action@v3'
+    - uses: 'docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567' # v3
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'