Pin dependencies

mortenlj · Oct 20, 2024 · 06cb696 · 06cb696
1 parent a120d17
commit 06cb696
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 14 deletions.
diff --git a/.github/actions/get_data/Dockerfile b/.github/actions/get_data/Dockerfile
@@ -1,5 +1,5 @@
 # action will be run in python3 container
-FROM python:3
+FROM python:3@sha256:a31cbb4db18c6f09e3300fa85b77f6d56702501fcb9bdb8792ec702a39ba6200
 # copying requirements.txt and install the action dependencies
 COPY requirements.txt /requirements.txt
 RUN pip install -r /requirements.txt

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -10,7 +10,7 @@ jobs:
     outputs:
       version: ${{ steps.set-version.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: set version
         id: set-version
         run: echo version=$(date "+%Y-%m-%d-%H%M%S")-$(git rev-parse --short HEAD) >> "${GITHUB_OUTPUT}"
@@ -20,17 +20,17 @@ jobs:
       - set-version
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: upload earthlyw
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: earthlyw
           path: earthlyw
           if-no-files-found: error
 
       - name: upload ew
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: ew
           path: ew
@@ -47,12 +47,12 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: lee-dohm/close-matching-issues@v2
+      - uses: lee-dohm/close-matching-issues@e9e43aad2fa6f06a058cedfd8fb975fd93b56d8f # v2
         with:
           query: 'label:release-candidate'
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: dacbd/create-issue-action@v2.0.0
+      - uses: dacbd/create-issue-action@cdb57ab6ff8862aa09fee2be6ba77a59581921c2 # v2.0.0
         name: Create Release candidate issue
         with:
           title: Release candidate ${{ needs.set-version.outputs.version }}

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -8,52 +8,52 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Get release candidate
         id: get_data
         uses: ./.github/actions/get_data
 
       - name: create release
         id: create_release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1
         with:
           tag_name: ${{ steps.get_data.outputs.version }}
           release_name: Release ${{ steps.get_data.outputs.version }}
           draft: false
           prerelease: false
 
       - name: Download earthlyw artifact
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow: main.yaml
           run_id: ${{ steps.get_data.outputs.run_id }}
           name: earthlyw
 
       - name: upload earthlyw to release
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
         with:
           upload_url: ${{ steps.create_release.outputs.upload_url }}
           asset_path: ./earthlyw
           asset_name: earthlyw
           asset_content_type: application/octet-stream
 
       - name: Download ew artifact
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow: main.yaml
           run_id: ${{ steps.get_data.outputs.run_id }}
           name: ew
 
       - name: upload ew to release
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
         with:
           upload_url: ${{ steps.create_release.outputs.upload_url }}
           asset_path: ./ew
           asset_name: ew
           asset_content_type: application/octet-stream
 
-      - uses: lee-dohm/close-matching-issues@v2
+      - uses: lee-dohm/close-matching-issues@e9e43aad2fa6f06a058cedfd8fb975fd93b56d8f # v2
         if: success()
         with:
           query: 'label:release-candidate'