Skip to content

Commit cda953d

Browse files
alessfgalessfg
committed
Replace GitHub Action release tags with SHAs
1 parent 5f2ad18 commit cda953d

File tree

4 files changed

+112
-112
lines changed

4 files changed

+112
-112
lines changed

‎.github/workflows/alpine-mainline.yml

+33-33
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
distro: ${{ steps.distro_version.outputs.release }}
1616
steps:
1717
- name: Check out the codebase
18-
uses: actions/checkout@v4
18+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
1919

2020
- name: Parse NGINX mainline version
2121
id: nginx_version
@@ -37,49 +37,49 @@ jobs:
3737
needs: version
3838
steps:
3939
- name: Check out the codebase
40-
uses: actions/checkout@v4
40+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4141

4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@v3
43+
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
4444

4545
- name: Set up Docker Buildx
46-
uses: docker/setup-buildx-action@v3
46+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
4747

4848
- name: Configure AWS credentials
49-
uses: aws-actions/configure-aws-credentials@v4
49+
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
5050
with:
5151
aws-region: ${{ secrets.AWS_REGION }}
5252
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
5353
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
5454

5555
- name: Login to Amazon ECR Public Gallery
56-
uses: docker/login-action@v3
56+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
5757
with:
5858
registry: public.ecr.aws
5959

6060
- name: Login to Docker Hub
61-
uses: docker/login-action@v3
61+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
6262
with:
6363
username: ${{ secrets.DOCKERHUB_USERNAME }}
6464
password: ${{ secrets.DOCKERHUB_TOKEN }}
6565

6666
- name: Login to GitHub Container Registry
67-
uses: docker/login-action@v3
67+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
6868
with:
6969
registry: ghcr.io
7070
username: ${{ github.actor }}
7171
password: ${{ secrets.GITHUB_TOKEN }}
7272

7373
- name: Login to Quay
74-
uses: docker/login-action@v3
74+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
7575
with:
7676
registry: quay.io
7777
username: ${{ secrets.QUAY_USERNAME }}
7878
password: ${{ secrets.QUAY_TOKEN }}
7979

8080
- name: Extract metadata (tags, labels) for Docker
8181
id: meta
82-
uses: docker/metadata-action@v5
82+
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
8383
with:
8484
images: |
8585
public.ecr.aws/nginx/nginx-unprivileged
@@ -100,7 +100,7 @@ jobs:
100100
101101
- name: Build and push NGINX mainline slim Alpine image to Amazon ECR Public Gallery, Docker Hub, GitHub Container Registry, and Quay
102102
id: build
103-
uses: docker/build-push-action@v5
103+
uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
104104
with:
105105
platforms: linux/amd64, linux/arm/v6, linux/arm/v7, linux/arm64, linux/386, linux/ppc64le, linux/s390x
106106
context: "{{ defaultContext }}:mainline/alpine-slim"
@@ -146,49 +146,49 @@ jobs:
146146
needs: [version, slim]
147147
steps:
148148
- name: Check out the codebase
149-
uses: actions/checkout@v4
149+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
150150

151151
- name: Set up QEMU
152-
uses: docker/setup-qemu-action@v3
152+
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
153153

154154
- name: Set up Docker Buildx
155-
uses: docker/setup-buildx-action@v3
155+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
156156

157157
- name: Configure AWS credentials
158-
uses: aws-actions/configure-aws-credentials@v4
158+
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
159159
with:
160160
aws-region: ${{ secrets.AWS_REGION }}
161161
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
162162
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
163163

164164
- name: Login to Amazon ECR Public Gallery
165-
uses: docker/login-action@v3
165+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
166166
with:
167167
registry: public.ecr.aws
168168

169169
- name: Login to Docker Hub
170-
uses: docker/login-action@v3
170+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
171171
with:
172172
username: ${{ secrets.DOCKERHUB_USERNAME }}
173173
password: ${{ secrets.DOCKERHUB_TOKEN }}
174174

175175
- name: Login to GitHub Container Registry
176-
uses: docker/login-action@v3
176+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
177177
with:
178178
registry: ghcr.io
179179
username: ${{ github.actor }}
180180
password: ${{ secrets.GITHUB_TOKEN }}
181181

182182
- name: Login to Quay
183-
uses: docker/login-action@v3
183+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
184184
with:
185185
registry: quay.io
186186
username: ${{ secrets.QUAY_USERNAME }}
187187
password: ${{ secrets.QUAY_TOKEN }}
188188

189189
- name: Extract metadata (tags, labels) for Docker
190190
id: meta
191-
uses: docker/metadata-action@v5
191+
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
192192
with:
193193
images: |
194194
public.ecr.aws/nginx/nginx-unprivileged
@@ -209,7 +209,7 @@ jobs:
209209
210210
- name: Build and push NGINX mainline Alpine image to Amazon ECR Public Gallery, Docker Hub, GitHub Container Registry, and Quay
211211
id: build
212-
uses: docker/build-push-action@v5
212+
uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
213213
with:
214214
platforms: linux/amd64, linux/arm/v6, linux/arm/v7, linux/arm64, linux/386, linux/ppc64le, linux/s390x
215215
context: "{{ defaultContext }}:mainline/alpine"
@@ -255,49 +255,49 @@ jobs:
255255
needs: [version, core]
256256
steps:
257257
- name: Check out the codebase
258-
uses: actions/checkout@v4
258+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
259259

260260
- name: Set up QEMU
261-
uses: docker/setup-qemu-action@v3
261+
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
262262

263263
- name: Set up Docker Buildx
264-
uses: docker/setup-buildx-action@v3
264+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
265265

266266
- name: Configure AWS credentials
267-
uses: aws-actions/configure-aws-credentials@v4
267+
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
268268
with:
269269
aws-region: ${{ secrets.AWS_REGION }}
270270
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
271271
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
272272

273273
- name: Login to Amazon ECR Public Gallery
274-
uses: docker/login-action@v3
274+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
275275
with:
276276
registry: public.ecr.aws
277277

278278
- name: Login to Docker Hub
279-
uses: docker/login-action@v3
279+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
280280
with:
281281
username: ${{ secrets.DOCKERHUB_USERNAME }}
282282
password: ${{ secrets.DOCKERHUB_TOKEN }}
283283

284284
- name: Login to GitHub Container Registry
285-
uses: docker/login-action@v3
285+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
286286
with:
287287
registry: ghcr.io
288288
username: ${{ github.actor }}
289289
password: ${{ secrets.GITHUB_TOKEN }}
290290

291291
- name: Login to Quay
292-
uses: docker/login-action@v3
292+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
293293
with:
294294
registry: quay.io
295295
username: ${{ secrets.QUAY_USERNAME }}
296296
password: ${{ secrets.QUAY_TOKEN }}
297297

298298
- name: Extract metadata (tags, labels) for Docker
299299
id: meta
300-
uses: docker/metadata-action@v5
300+
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
301301
with:
302302
images: |
303303
public.ecr.aws/nginx/nginx-unprivileged
@@ -318,7 +318,7 @@ jobs:
318318
319319
- name: Build and push NGINX mainline perl Alpine image to Amazon ECR Public Gallery, Docker Hub, GitHub Container Registry, and Quay
320320
id: build
321-
uses: docker/build-push-action@v5
321+
uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
322322
with:
323323
platforms: linux/amd64, linux/arm/v6, linux/arm/v7, linux/arm64, linux/386, linux/ppc64le, linux/s390x
324324
context: "{{ defaultContext }}:mainline/alpine-perl"
@@ -364,10 +364,10 @@ jobs:
364364
needs: [slim, core, perl]
365365
steps:
366366
- name: Check out the codebase
367-
uses: actions/checkout@v4
367+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
368368

369369
- name: Configure AWS credentials
370-
uses: aws-actions/configure-aws-credentials@v4
370+
uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1
371371
with:
372372
aws-region: ${{ secrets.AWS_REGION }}
373373
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}

0 commit comments

Comments
 (0)