Skip to content

Commit 7fb0692

Browse files
GoryudyumaGoryudyuma
authored
Merge pull request #3606 from dev-hato/fix_pin_action_version
actionsのバージョンを固定する
2 parents 85af49b + 003ecfe commit 7fb0692

15 files changed

Lines changed: 42 additions & 42 deletions

‎.github/workflows/add-to-task-list.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ jobs:
1414
steps:
1515
- name: Generate a token
1616
id: generate_token
17-
uses: actions/create-github-app-token@v1.8.0
17+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
1818
with:
1919
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
2020
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
21-
- uses: dev-hato/actions-add-to-projects@v0.0.60
21+
- uses: dev-hato/actions-add-to-projects@dcafd4eb5253d6ae0f4f29cff0dc46fd29bb5128 # v0.0.60
2222
with:
2323
github-token: ${{steps.generate_token.outputs.token}}
2424
project-url: https://github.com/orgs/dev-hato/projects/1

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,14 +43,14 @@ jobs:
4343
- name: Checkout repository
4444
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4545
- name: Set up Python
46-
uses: actions/setup-python@v5.0.0
46+
uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
4747
if: matrix.language == 'python'
4848
with:
4949
python-version-file: .python-version
5050
cache: pipenv
5151
# Initializes the CodeQL tools for scanning.
5252
- name: Initialize CodeQL
53-
uses: github/codeql-action/init@v3
53+
uses: github/codeql-action/init@65c74964a9ed8c44ed9f19d4bbc5757a6a8e9ab9 # codeql-bundle-v2.16.1
5454
with:
5555
languages: ${{ matrix.language }}
5656
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
6262
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
6363
# queries: security-extended,security-and-quality
6464

65-
uses: github/codeql-action/autobuild@v3
65+
uses: github/codeql-action/autobuild@65c74964a9ed8c44ed9f19d4bbc5757a6a8e9ab9 # codeql-bundle-v2.16.1
6666
# - run: |
6767
# echo "Run, Build Application using script"
6868
# ./location_of_script_within_repo/buildscript.sh
@@ -72,7 +72,7 @@ jobs:
7272

7373
# If the Autobuild fails above, remove it and uncomment the following three lines.
7474
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
75-
uses: github/codeql-action/analyze@v3
75+
uses: github/codeql-action/analyze@65c74964a9ed8c44ed9f19d4bbc5757a6a8e9ab9 # codeql-bundle-v2.16.1
7676
with:
7777
category: "/language:${{matrix.language}}"
7878
concurrency:

‎.github/workflows/deploy-hato-bot.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -32,38 +32,38 @@ jobs:
3232
- name: Set .env
3333
run: cp .env.example .env
3434
- name: Login to GitHub Container Registry
35-
uses: docker/login-action@v3.0.0
35+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
3636
with:
3737
registry: ghcr.io
3838
username: ${{ github.actor }}
3939
password: ${{ secrets.GITHUB_TOKEN }}
4040
- name: Set up QEMU
41-
uses: docker/setup-qemu-action@v3.0.0
41+
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
4242
- name: Set up Docker Buildx
4343
id: buildx
44-
uses: docker/setup-buildx-action@v3.0.0
44+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
4545
- run: echo "TAG_NAME=${HEAD_REF//\//-}" >> "$GITHUB_ENV"
4646
env:
4747
HEAD_REF: ${{github.head_ref}}
4848
if: ${{ github.event_name == 'pull_request' }}
4949
- run: echo 'TAG_NAME=${{ github.event.release.tag_name }}' >> "$GITHUB_ENV"
5050
if: ${{ github.event_name == 'release' }}
5151
- name: Build and push (build)
52-
uses: docker/bake-action@v4.1.0
52+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
5353
env:
5454
DOCKER_CONTENT_TRUST: 1
5555
with:
5656
push: true
5757
files: build.docker-compose.yml
5858
- name: Build and push (main)
59-
uses: docker/bake-action@v4.1.0
59+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
6060
env:
6161
DOCKER_CONTENT_TRUST: 1
6262
with:
6363
push: true
6464
files: docker-compose.yml
6565
- name: Build and push (dev)
66-
uses: docker/bake-action@v4.1.0
66+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
6767
env:
6868
DOCKER_CONTENT_TRUST: 1
6969
with:
@@ -72,23 +72,23 @@ jobs:
7272
- run: echo 'TAG_NAME=latest' >> "$GITHUB_ENV"
7373
if: ${{ github.event_name == 'release' }}
7474
- name: Build and push (build) (latest)
75-
uses: docker/bake-action@v4.1.0
75+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
7676
if: ${{ github.event_name == 'release' }}
7777
env:
7878
DOCKER_CONTENT_TRUST: 1
7979
with:
8080
push: true
8181
files: build.docker-compose.yml
8282
- name: Build and push (main) (latest)
83-
uses: docker/bake-action@v4.1.0
83+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
8484
if: ${{ github.event_name == 'release' }}
8585
env:
8686
DOCKER_CONTENT_TRUST: 1
8787
with:
8888
push: true
8989
files: docker-compose.yml
9090
- name: Build and push (dev) (latest)
91-
uses: docker/bake-action@v4.1.0
91+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
9292
if: ${{ github.event_name == 'release' }}
9393
env:
9494
DOCKER_CONTENT_TRUST: 1
@@ -122,7 +122,7 @@ jobs:
122122
run: bash "${GITHUB_WORKSPACE}/scripts/deploy_hato_bot/update_version_python_version/get_python_version.sh"
123123
env:
124124
HEAD_REF: ${{github.head_ref || github.event.release.tag_name}}
125-
- uses: dev-hato/actions-diff-pr-management@v1.1.12
125+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
126126
with:
127127
github-token: ${{secrets.GITHUB_TOKEN}}
128128
branch-name-prefix: fix-version-python-version
@@ -135,7 +135,7 @@ jobs:
135135
with:
136136
fetch-depth: 0
137137
ref: ${{ github.event.pull_request.head.sha }}
138-
- uses: dev-hato/actions-update-dockle@v0.0.81
138+
- uses: dev-hato/actions-update-dockle@c92b0e505cc4ed6dc1b4c2c6851193d02ce5fcba # v0.0.81
139139
with:
140140
github-token: ${{secrets.GITHUB_TOKEN}}
141141
dockle:

‎.github/workflows/format-json-yml.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
steps:
2121
- name: Generate a token
2222
id: generate_token
23-
uses: actions/create-github-app-token@v1.8.0
23+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
2424
with:
2525
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
2626
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
@@ -30,7 +30,7 @@ jobs:
3030
fetch-depth: 0
3131
ref: ${{ github.event.pull_request.head.sha }}
3232
token: ${{steps.generate_token.outputs.token}}
33-
- uses: dev-hato/actions-format-json-yml@v0.0.61
33+
- uses: dev-hato/actions-format-json-yml@8bc54d29568af8a0ef93d36db8fc559a8f76fd73 # v0.0.61
3434
with:
3535
github-token: ${{steps.generate_token.outputs.token}}
3636
concurrency:

‎.github/workflows/github-actions-cache-cleaner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
16-
- uses: dev-hato/github-actions-cache-cleaner@v0.0.37
16+
- uses: dev-hato/github-actions-cache-cleaner@8631f246ce2cc3142a954ada28c9c6671d4655ca # v0.0.37
1717
with:
1818
github-token: ${{secrets.GITHUB_TOKEN}}
1919
concurrency:

‎.github/workflows/pr-check-npm.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,15 +26,15 @@ jobs:
2626
with:
2727
fetch-depth: 0
2828
ref: ${{ github.event.pull_request.head.sha }}
29-
- uses: actions/setup-node@v4.0.2
29+
- uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
3030
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3131
with:
3232
cache: npm
3333
- name: Get npm version
3434
id: get_npm_version
3535
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3636
run: bash "${GITHUB_WORKSPACE}/scripts/pr_check_npm/pr_update_version/get_npm_version.sh"
37-
- uses: dev-hato/actions-diff-pr-management@v1.1.12
37+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
3838
with:
3939
github-token: ${{secrets.GITHUB_TOKEN}}
4040
branch-name-prefix: fix-version
@@ -52,14 +52,14 @@ jobs:
5252
fetch-depth: 0
5353
ref: ${{ github.event.pull_request.head.sha }}
5454
- name: Set up Node.js
55-
uses: actions/setup-node@v4.0.2
55+
uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
5656
if: github.event_name != 'pull_request' || github.event.action != 'closed'
5757
with:
5858
cache: npm
5959
- name: Install dependencies
6060
if: github.event_name != 'pull_request' || github.event.action != 'closed'
6161
run: bash "${GITHUB_WORKSPACE}/scripts/pr_check_npm/npm_install.sh"
62-
- uses: dev-hato/actions-diff-pr-management@v1.1.12
62+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
6363
with:
6464
github-token: ${{secrets.GITHUB_TOKEN}}
6565
branch-name-prefix: npm

‎.github/workflows/pr-copy-ci-hato-bot.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,13 +12,13 @@ jobs:
1212
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
1313
- name: Generate a token
1414
id: generate_token
15-
uses: actions/create-github-app-token@v1.8.0
15+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
1616
with:
1717
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
1818
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
1919
owner: ${{ github.repository_owner }}
2020
repositories: "sudden-death"
21-
- uses: actions/github-script@v7.0.1
21+
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2222
with:
2323
github-token: ${{steps.generate_token.outputs.token}}
2424
script: |

‎.github/workflows/pr-format.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
fetch-depth: 0
2828
ref: ${{ github.event.pull_request.head.sha }}
2929
- name: Set up Python
30-
uses: actions/setup-python@v5.0.0
30+
uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
3131
id: setup_python
3232
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3333
with:
@@ -48,7 +48,7 @@ jobs:
4848
id: format
4949
if: github.event_name != 'pull_request' || github.event.action != 'closed'
5050
run: bash "${GITHUB_WORKSPACE}/scripts/pr_format/pr_format/format.sh"
51-
- uses: dev-hato/actions-diff-pr-management@v1.1.12
51+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
5252
if: success() || failure()
5353
with:
5454
github-token: ${{secrets.GITHUB_TOKEN}}

‎.github/workflows/pr-merge-develop-hato-bot.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414
with:
1515
fetch-depth: 0
1616
- name: Get PullRequests
17-
uses: actions/github-script@v7.0.1
17+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
1818
id: get_pull_requests
1919
with:
2020
github-token: ${{secrets.GITHUB_TOKEN}}
2121
script: |
2222
const script = require(`${process.env.GITHUB_WORKSPACE}/scripts/get_pull_requests_hato_bot.js`)
2323
return await script({github, context})
2424
- name: Create PullRequest
25-
uses: actions/github-script@v7.0.1
25+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2626
if: ${{ steps.get_pull_requests.outputs.result == 0 }}
2727
with:
2828
github-token: ${{secrets.GITHUB_TOKEN}}

‎.github/workflows/pr-release-hato-bot.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
id: get_diff
1717
run: bash "${GITHUB_WORKSPACE}/scripts/pr_release_hato_bot/pr_release/get_diff.sh"
1818
- name: Get PullRequests
19-
uses: actions/github-script@v7.0.1
19+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2020
if: ${{ steps.get_diff.outputs.result != '' }}
2121
id: get_pull_requests
2222
with:
@@ -25,7 +25,7 @@ jobs:
2525
const script = require(`${process.env.GITHUB_WORKSPACE}/scripts/get_pull_requests_hato_bot.js`)
2626
return await script({github, context})
2727
- name: Create PullRequest
28-
uses: actions/github-script@v7.0.1
28+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2929
if: ${{ steps.get_diff.outputs.result != '' && steps.get_pull_requests.outputs.result == 0 }}
3030
with:
3131
github-token: ${{secrets.GITHUB_TOKEN}}

0 commit comments

Comments
 (0)