From ee782937413416efc1605a807245d2f469992256 Mon Sep 17 00:00:00 2001 From: rgarcia <72655+rgarcia@users.noreply.github.com> Date: Fri, 13 Nov 2026 21:09:06 +0000 Subject: [PATCH] Lock workflow action dependencies with actions.lock --- .github/workflows/acceptance.yml | 6 ++-- .github/workflows/actions.lock | 56 ++++++++++++++++++++++++++++++++ .github/workflows/ci.yml | 8 ++--- .github/workflows/release.yml | 12 +++---- 4 files changed, 69 insertions(+), 13 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml index dd6b74f..6289029 100644 --- a/.github/workflows/acceptance.yml +++ b/.github/workflows/acceptance.yml @@ -80,16 +80,16 @@ jobs: : "${KERNEL_AUDIT_EXPORT_ROLE_ARN:?Set the KERNEL_AUDIT_EXPORT_ROLE_ARN repository secret before running audit log export acceptance tests.}" - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.5.0 with: go-version-file: go.mod cache: true - name: Set up Terraform - uses: hashicorp/setup-terraform@v4 + uses: hashicorp/setup-terraform@v4.0.1 with: terraform_version: "1.15.5" terraform_wrapper: false diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..ce8d88d --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,56 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/acceptance.yml': + - 'actions/checkout@v6.1.0' + - 'actions/setup-go@v6.5.0' + - 'hashicorp/setup-terraform@v4.0.1' + '.github/workflows/ci.yml': + - 'actions/checkout@v6.1.0' + - 'actions/setup-go@v6.5.0' + - 'goreleaser/goreleaser-action@v7.2.2' + - 'hashicorp/setup-terraform@v4.0.1' + '.github/workflows/release.yml': + - 'actions/checkout@v7.0.0' + - 'actions/download-artifact@v8.0.1' + - 'actions/setup-go@v6.5.0' + - 'actions/upload-artifact@v7.0.1' + - 'goreleaser/goreleaser-action@v7.2.2' +dependencies: + 'actions/checkout@v6.1.0': + ref: 'v6.1.0' + commit: 'sha1-d23441a48e516b6c34aea4fa41551a30e30af803' + owner_id: 44036562 + repo_id: 197814629 + 'actions/checkout@v7.0.0': + ref: 'v7.0.0' + commit: 'sha1-9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.1': + ref: 'v8.0.1' + commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-go@v6.5.0': + ref: 'v6.5.0' + commit: 'sha1-924ae3a1cded613372ab5595356fb5720e22ba16' + owner_id: 44036562 + repo_id: 192624594 + 'actions/upload-artifact@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + owner_id: 44036562 + repo_id: 192625955 + 'goreleaser/goreleaser-action@v7.2.2': + ref: 'v7.2.2' + commit: 'sha1-5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89' + owner_id: 24697112 + repo_id: 209873006 + 'hashicorp/setup-terraform@v4.0.1': + ref: 'v4.0.1' + commit: 'sha1-dfe3c3f87815947d99a8997f908cb6525fc44e9e' + owner_id: 761456 + repo_id: 258271226 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 27f1a8e..3655029 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,16 +17,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.5.0 with: go-version-file: go.mod cache: true - name: Set up Terraform - uses: hashicorp/setup-terraform@v4 + uses: hashicorp/setup-terraform@v4.0.1 with: terraform_version: "1.15.5" terraform_wrapper: false @@ -61,7 +61,7 @@ jobs: run: bash scripts/test-release-scripts.sh - name: Set up GoReleaser - uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2 + uses: goreleaser/goreleaser-action@v7.2.2 with: distribution: goreleaser version: v2.17.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7508276..3b9f1a8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@v7.0.0 with: fetch-depth: 0 persist-credentials: false @@ -75,13 +75,13 @@ jobs: git tag "$RELEASE_TAG" "$GITHUB_SHA" - name: Set up Go - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + uses: actions/setup-go@v6.5.0 with: go-version-file: go.mod cache: true - name: Build unsigned release artifacts - uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2 + uses: goreleaser/goreleaser-action@v7.2.2 with: distribution: goreleaser version: v2.17.0 @@ -104,7 +104,7 @@ jobs: run: bash scripts/sign-release-checksum.sh "${RELEASE_TAG#v}" - name: Upload release artifacts - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.1 with: name: release-${{ env.RELEASE_TAG }}-${{ github.run_id }} path: | @@ -127,12 +127,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@v7.0.0 with: persist-credentials: false - name: Download release artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@v8.0.1 with: name: release-${{ github.ref_name }}-${{ github.run_id }} path: dist