particle-os/particle-os-modules
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: pin actions to commit hashes (#394)

Browse source
This commit is contained in:
RoyalOughtness 2025-03-06 22:35:06 -08:00 • committed by GitHub
parent 1c52771e2b
commit 4f77bfe362
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 12 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

10
.github/workflows/build-individual.yml vendored
View file

@ -11,22 +11,22 @@ jobs:
build-individual: build-individual:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: hustcer/setup-nu@v3.13 - uses: hustcer/setup-nu@0000000ae6a4e242e802c943f465373b70b07469 # v3.17
with: with:
version: v0.93 version: v0.93
- uses: docker/setup-buildx-action@v3 - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v3 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- uses: sigstore/cosign-installer@v3.6.0 - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
- name: Run build and push script - name: Run build and push script
run: nu ./build-individual.nu run: nu ./build-individual.nu

10
.github/workflows/build-unified.yml vendored
View file

@ -11,22 +11,22 @@ jobs:
build-unified: build-unified:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: hustcer/setup-nu@v3.13 - uses: hustcer/setup-nu@0000000ae6a4e242e802c943f465373b70b07469 # v3.17
with: with:
version: v0.93 version: v0.93
- uses: docker/setup-buildx-action@v3 - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v3 uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- uses: sigstore/cosign-installer@v3.6.0 - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
- name: Run build and push script - name: Run build and push script
run: nu ./build-unified.nu run: nu ./build-unified.nu

4
.github/workflows/reviewdog.yml vendored
View file

@ -7,9 +7,9 @@ jobs:
name: runner / shellcheck name: runner / shellcheck
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: shellcheck - name: shellcheck
uses: reviewdog/action-shellcheck@v1 uses: reviewdog/action-shellcheck@6e0e63d1750d02d761b3df0f2c5ba9f9ac4a9ed7 # v1.29.0
with: with:
github_token: ${{ github.token }} github_token: ${{ github.token }}
reporter: github-pr-review reporter: github-pr-review