Lock workflow action dependencies with actions.lock

.github/workflows/acceptance.yml

@@ -80,16 +80,16 @@ jobs:
           : "${KERNEL_AUDIT_EXPORT_ROLE_ARN:?Set the KERNEL_AUDIT_EXPORT_ROLE_ARN repository secret before running audit log export acceptance tests.}"
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.1.0
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.5.0
         with:
           go-version-file: go.mod
           cache: true
 
       - name: Set up Terraform
-        uses: hashicorp/setup-terraform@v4
+        uses: hashicorp/setup-terraform@v4.0.1
         with:
           terraform_version: "1.15.5"
           terraform_wrapper: false

.github/workflows/actions.lock

@@ -0,0 +1,56 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/acceptance.yml':
+        - 'actions/checkout@v6.1.0'
+        - 'actions/setup-go@v6.5.0'
+        - 'hashicorp/setup-terraform@v4.0.1'
+    '.github/workflows/ci.yml':
+        - 'actions/checkout@v6.1.0'
+        - 'actions/setup-go@v6.5.0'
+        - 'goreleaser/goreleaser-action@v7.2.2'
+        - 'hashicorp/setup-terraform@v4.0.1'
+    '.github/workflows/release.yml':
+        - 'actions/checkout@v7.0.0'
+        - 'actions/download-artifact@v8.0.1'
+        - 'actions/setup-go@v6.5.0'
+        - 'actions/upload-artifact@v7.0.1'
+        - 'goreleaser/goreleaser-action@v7.2.2'
+dependencies:
+    'actions/checkout@v6.1.0':
+        ref: 'v6.1.0'
+        commit: 'sha1-d23441a48e516b6c34aea4fa41551a30e30af803'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v7.0.0':
+        ref: 'v7.0.0'
+        commit: 'sha1-9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/download-artifact@v8.0.1':
+        ref: 'v8.0.1'
+        commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/setup-go@v6.5.0':
+        ref: 'v6.5.0'
+        commit: 'sha1-924ae3a1cded613372ab5595356fb5720e22ba16'
+        owner_id: 44036562
+        repo_id: 192624594
+    'actions/upload-artifact@v7.0.1':
+        ref: 'v7.0.1'
+        commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
+        owner_id: 44036562
+        repo_id: 192625955
+    'goreleaser/goreleaser-action@v7.2.2':
+        ref: 'v7.2.2'
+        commit: 'sha1-5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89'
+        owner_id: 24697112
+        repo_id: 209873006
+    'hashicorp/setup-terraform@v4.0.1':
+        ref: 'v4.0.1'
+        commit: 'sha1-dfe3c3f87815947d99a8997f908cb6525fc44e9e'
+        owner_id: 761456
+        repo_id: 258271226

.github/workflows/ci.yml

@@ -17,16 +17,16 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.1.0
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.5.0
         with:
           go-version-file: go.mod
           cache: true
 
       - name: Set up Terraform
-        uses: hashicorp/setup-terraform@v4
+        uses: hashicorp/setup-terraform@v4.0.1
         with:
           terraform_version: "1.15.5"
           terraform_wrapper: false
@@ -61,7 +61,7 @@ jobs:
         run: bash scripts/test-release-scripts.sh
 
       - name: Set up GoReleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
+        uses: goreleaser/goreleaser-action@v7.2.2
         with:
           distribution: goreleaser
           version: v2.17.0

.github/workflows/release.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -75,13 +75,13 @@ jobs:
           git tag "$RELEASE_TAG" "$GITHUB_SHA"
 
       - name: Set up Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+        uses: actions/setup-go@v6.5.0
         with:
           go-version-file: go.mod
           cache: true
 
       - name: Build unsigned release artifacts
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
+        uses: goreleaser/goreleaser-action@v7.2.2
         with:
           distribution: goreleaser
           version: v2.17.0
@@ -104,7 +104,7 @@ jobs:
         run: bash scripts/sign-release-checksum.sh "${RELEASE_TAG#v}"
 
       - name: Upload release artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: release-${{ env.RELEASE_TAG }}-${{ github.run_id }}
           path: |
@@ -127,12 +127,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@v7.0.0
         with:
           persist-credentials: false
 
       - name: Download release artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@v8.0.1
         with:
           name: release-${{ github.ref_name }}-${{ github.run_id }}
           path: dist