Skip to content

Commit d39537a

Browse files
hashicorp-tsccr[bot]roncodingenthusiast
hashicorp-tsccr[bot]
and
roncodingenthusiast
authored
SEC-090: Automated trusted workflow pinning (2023-04-24) (#330)
* Result of tsccr-helper -pin-all-workflows --------- Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com> Co-authored-by: Ronald Ekambi <[email protected]>
1 parent dd416ce commit d39537a

File tree

3 files changed

+23
-23
lines changed

3 files changed

+23
-23
lines changed

‎.github/workflows/build.yml‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -21,8 +21,8 @@ jobs:
2121
outputs:
2222
go-version: ${{ steps.get-go-version.outputs.go-version }}
2323
steps:
24-
- uses: actions/checkout@v3
25-
- uses: actions/setup-go@v4
24+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
25+
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
2626
with:
2727
go-version-file: 'go.mod'
2828
- name: Determine Go version
@@ -37,7 +37,7 @@ jobs:
3737
outputs:
3838
product-version: ${{ steps.get-product-version.outputs.product-version }}
3939
steps:
40-
- uses: actions/checkout@v3
40+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
4141
- name: get product version
4242
id: get-product-version
4343
run: |
@@ -51,15 +51,15 @@ jobs:
5151
filepath: ${{ steps.generate-metadata-file.outputs.filepath }}
5252
steps:
5353
- name: "Checkout directory"
54-
uses: actions/checkout@v3
54+
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
5555
- name: Generate metadata file
5656
id: generate-metadata-file
5757
uses: hashicorp/actions-generate-metadata@v1
5858
with:
5959
version: ${{ needs.get-product-version.outputs.product-version }}
6060
product: ${{ env.PKG_NAME }}
6161
repositoryOwner: "hashicorp"
62-
- uses: actions/upload-artifact@v3
62+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
6363
with:
6464
name: metadata.json
6565
path: ${{ steps.generate-metadata-file.outputs.filepath }}
@@ -86,10 +86,10 @@ jobs:
8686
name: Go ${{ needs.get-go-version.outputs.go-version }} ${{ matrix.goos }} ${{ matrix.goarch }} build
8787

8888
steps:
89-
- uses: actions/checkout@v3
89+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
9090

9191
- name: Setup go
92-
uses: actions/setup-go@v4
92+
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
9393
with:
9494
go-version: ${{ needs.get-go-version.outputs.go-version }}
9595

@@ -103,7 +103,7 @@ jobs:
103103
go build -o dist/ -ldflags "-s -w -X $(go list -m)/version.GitCommit=$(git rev-parse --short HEAD)" .
104104
zip -r -j out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip dist/
105105
106-
- uses: actions/upload-artifact@v3
106+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
107107
with:
108108
name: ${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
109109
path: out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
@@ -123,10 +123,10 @@ jobs:
123123
name: Go ${{ needs.get-go-version.outputs.go-version }} ${{ matrix.goos }} ${{ matrix.goarch }} build
124124

125125
steps:
126-
- uses: actions/checkout@v3
126+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
127127

128128
- name: Setup go
129-
uses: actions/setup-go@v4
129+
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
130130
with:
131131
go-version: ${{ needs.get-go-version.outputs.go-version }}
132132

@@ -140,7 +140,7 @@ jobs:
140140
go build -o dist/ -ldflags "-s -w -X $(go list -m)/version.GitCommit=$(git rev-parse --short HEAD)" .
141141
zip -r -j out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip dist/
142142
143-
- uses: actions/upload-artifact@v3
143+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
144144
with:
145145
name: ${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
146146
path: out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
@@ -166,13 +166,13 @@ jobs:
166166
echo "RPM_PACKAGE=$(basename out/*.rpm)" >> $GITHUB_ENV
167167
echo "DEB_PACKAGE=$(basename out/*.deb)" >> $GITHUB_ENV
168168
169-
- uses: actions/upload-artifact@v3
169+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
170170
if: ${{ matrix.goos == 'linux' }}
171171
with:
172172
name: ${{ env.RPM_PACKAGE }}
173173
path: out/${{ env.RPM_PACKAGE }}
174174

175-
- uses: actions/upload-artifact@v3
175+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
176176
if: ${{ matrix.goos == 'linux' }}
177177
with:
178178
name: ${{ env.DEB_PACKAGE }}
@@ -196,10 +196,10 @@ jobs:
196196
GOARCH: ${{ matrix.goarch }}
197197

198198
steps:
199-
- uses: actions/checkout@v3
199+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
200200

201201
- name: Setup go
202-
uses: actions/setup-go@v4
202+
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
203203
with:
204204
go-version: ${{ needs.get-go-version.outputs.go-version }}
205205

@@ -209,7 +209,7 @@ jobs:
209209
go build -tags netcgo -o dist/
210210
zip -r -j out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip dist/
211211
212-
- uses: actions/upload-artifact@v3
212+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
213213
with:
214214
name: ${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
215215
path: out/${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
@@ -228,7 +228,7 @@ jobs:
228228
version: ${{ needs.get-product-version.outputs.product-version }}
229229

230230
steps:
231-
- uses: actions/checkout@v3
231+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
232232
- name: Docker Build (Action)
233233
uses: hashicorp/actions-docker-build@v1
234234
with:

‎.github/workflows/ci.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,10 @@ jobs:
1414
go: [^1]
1515

1616
steps:
17-
- uses: actions/checkout@v3
17+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
1818

1919
- name: Set up Go
20-
uses: actions/setup-go@v4
20+
uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
2121
with:
2222
go-version: ${{ matrix.go }}
2323

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,10 @@ jobs:
2626

2727
steps:
2828
- name: Checkout repository
29-
uses: actions/checkout@v3
29+
uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
3030

3131
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@v2
32+
uses: github/codeql-action/init@46a6823b81f2d7c67ddf123851eea88365bc8a67 # codeql-bundle-v2.13.5
3333
with:
3434
languages: ${{ matrix.language }}
3535
# If you wish to specify custom queries, you can do so here or in
@@ -43,7 +43,7 @@ jobs:
4343

4444
# compile?
4545
- name: Autobuild
46-
uses: github/codeql-action/autobuild@v2
46+
uses: github/codeql-action/autobuild@46a6823b81f2d7c67ddf123851eea88365bc8a67 # codeql-bundle-v2.13.5
4747

4848
- name: Perform CodeQL Analysis
49-
uses: github/codeql-action/analyze@v2
49+
uses: github/codeql-action/analyze@46a6823b81f2d7c67ddf123851eea88365bc8a67 # codeql-bundle-v2.13.5

0 commit comments

Comments
 (0)