@@ -34,10 +34,10 @@ jobs:
34
34
nodejs-paths : ${{ steps.nodejs.outputs.paths }}
35
35
nodejs-setups : ${{ steps.nodejs.outputs.setups }}
36
36
steps :
37
- - uses : actions/checkout@v4
37
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
38
38
with :
39
39
fetch-depth : 0
40
- - uses : actions/setup-go@v5
40
+ - uses : actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5
41
41
with :
42
42
go-version : ${{ env.GO_VERSION }}
43
43
- run : go build -o ${{ github.workspace }}/tools ./cmd/...
56
56
runs-on : ubuntu-latest
57
57
timeout-minutes : 5
58
58
steps :
59
- - uses : actions/checkout@v4
60
- - uses : actions/setup-node@v4
59
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
60
+ - uses : actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
61
61
with :
62
62
node-version : 20
63
63
- run : make lint
@@ -79,20 +79,20 @@ jobs:
79
79
steps :
80
80
- name : CI Setup
81
81
run : echo "${{ env.CI_SETUP }}"
82
- - uses : actions/checkout@v4
82
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
83
83
with :
84
84
ref : ${{ github.event.pull_request.head.sha }}
85
- - uses : actions/setup-node@v4
85
+ - uses : actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
86
86
with :
87
87
node-version : ${{ fromJson(env.CI_SETUP).node-version }}
88
- - uses : google-github-actions/auth@v2
88
+ - uses : google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2
89
89
with :
90
90
project_id : ${{ fromJson(env.CI_SETUP).project-id }}
91
91
workload_identity_provider : ${{ fromJson(env.CI_SETUP).workload-identity-provider }}
92
92
service_account : ${{ fromJson(env.CI_SETUP).service-account }}
93
93
access_token_lifetime : ${{ fromJson(env.CI_SETUP).access-token-lifetime }}
94
94
- name : Export environment variables
95
- uses : actions/github-script@v7
95
+ uses : actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
96
96
id : vars
97
97
with :
98
98
script : |
@@ -111,7 +111,7 @@ jobs:
111
111
.map(key => `${key}:${setup.secrets[key]}`)
112
112
.join('\n'),
113
113
}
114
- - uses : google-github-actions/get-secretmanager-secrets@v2
114
+ - uses : google-github-actions/get-secretmanager-secrets@e5bb06c2ca53b244f978d33348d18317a7f263ce # v2
115
115
if : ${{ fromJson(steps.vars.outputs.result).secrets }}
116
116
with :
117
117
secrets : ${{ fromJson(steps.vars.outputs.result).secrets }}
0 commit comments