chore: ensure action versions are pinned

Kong · Jan 20, 2025 · c4d2d6e · c4d2d6e
1 parent 53cf4bd
commit c4d2d6e
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 12 deletions.
diff --git a/.github/workflows/master-mirrors-main.yaml b/.github/workflows/master-mirrors-main.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0
     - name: Push HEAD to master

diff --git a/.github/workflows/release-pr.yaml b/.github/workflows/release-pr.yaml
@@ -19,12 +19,18 @@ env:
   KIND_VERSION: v0.23.0
 
 jobs:
+  ensure-actions-sha-pin:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
+    - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@c3a2b64f69b7a1542a68f44d9edbd9ec3fc1455e # v3.0.20
+
   lint:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
 
       - uses: jdx/mise-action@5083fe46898c414b2475087cc79da59e7da859e8 # v2.1.11
         with:
@@ -50,7 +56,7 @@ jobs:
           - gateway-operator
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
         with:
           fetch-depth: 0
 
@@ -62,7 +68,7 @@ jobs:
           helm repo add bitnami https://charts.bitnami.com/bitnami
           helm repo add kong https://charts.konghq.com
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: "3.11"
 
@@ -92,8 +98,6 @@ jobs:
     strategy:
       matrix:
         kubernetes-version:
-          # renovate: datasource=docker depName=kindest/node
-          - "1.26.15"
           # renovate: datasource=docker depName=kindest/node
           - "1.27.16"
           # renovate: datasource=docker depName=kindest/node
@@ -104,13 +108,15 @@ jobs:
           - "1.30.8"
           # renovate: datasource=docker depName=kindest/node
           - "1.31.4"
+          # renovate: datasource=docker depName=kindest/node
+          - "1.32.0"
         chart-name:
           - kong
           - ingress
           - gateway-operator
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
 
       - name: setup helm
         uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
@@ -151,7 +157,7 @@ jobs:
           - ingress
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
 
       - name: setup helm
         uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
@@ -178,7 +184,7 @@ jobs:
     name: golden-tests
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2.2.2
 
       - name: setup helm
         uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
@@ -204,6 +210,7 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     needs:
+      - ensure-actions-sha-pin
       - lint
       - lint-test
       - integration-test

diff --git a/.github/workflows/release-push.yaml b/.github/workflows/release-push.yaml
@@ -25,14 +25,14 @@ jobs:
           - gateway-operator
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
       - name: Set up Helm
         uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: "3.11"
 
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0