From 204f082fe563deb178a88ea74a1b482788ff8b62 Mon Sep 17 00:00:00 2001 From: Luke Heath Date: Thu, 31 Aug 2023 12:09:21 -0500 Subject: [PATCH] Pin all workflow actions versions by commit (#13462) --- .../build-and-push-fleetctl-docker.yml | 4 ++-- .github/workflows/build-binaries.yaml | 4 ++-- .github/workflows/build-orbit.yaml | 4 ++-- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/deploy-fleet-website.yml | 6 +++--- .github/workflows/docs.yml | 4 ++-- .github/workflows/fleet-and-orbit.yml | 18 +++++++++--------- .github/workflows/fleetctl-preview-latest.yml | 4 ++-- .../workflows/fleetctl-workstations-canary.yml | 2 +- .github/workflows/fleetctl-workstations.yml | 2 +- .github/workflows/generate-desktop-targets.yml | 12 ++++++------ .github/workflows/generate-nudge-targets.yml | 2 +- .../workflows/generate-osqueryd-targets.yml | 6 +++--- .github/workflows/golangci-lint.yml | 6 +++--- .github/workflows/goreleaser-fleet.yaml | 4 ++-- .github/workflows/goreleaser-orbit.yaml | 18 +++++++++--------- .../workflows/goreleaser-snapshot-fleet.yaml | 4 ++-- .github/workflows/integration.yml | 6 +++--- .github/workflows/pr-helm.yaml | 2 +- .github/workflows/push-osquery-perf-to-ecr.yml | 2 +- .github/workflows/release-helm.yaml | 2 +- .github/workflows/test-db-changes.yml | 2 +- .github/workflows/test-go.yaml | 4 ++-- .../test-native-tooling-packaging.yml | 4 ++-- .github/workflows/test-packaging.yml | 4 ++-- .github/workflows/test-website.yml | 4 ++-- .github/workflows/test-yml-specs.yml | 4 ++-- .github/workflows/test.yml | 4 ++-- .github/workflows/tfvalidate.yml | 4 ++-- 29 files changed, 72 insertions(+), 72 deletions(-) diff --git a/.github/workflows/build-and-push-fleetctl-docker.yml b/.github/workflows/build-and-push-fleetctl-docker.yml index b8822f2e23..84fcfd7e8d 100644 --- a/.github/workflows/build-and-push-fleetctl-docker.yml +++ b/.github/workflows/build-and-push-fleetctl-docker.yml @@ -30,7 +30,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Login to Docker Hub uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a @@ -39,7 +39,7 @@ jobs: password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }} - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: 1.19.11 diff --git a/.github/workflows/build-binaries.yaml b/.github/workflows/build-binaries.yaml index 47aede3a07..684025a5ca 100644 --- a/.github/workflows/build-binaries.yaml +++ b/.github/workflows/build-binaries.yaml @@ -25,12 +25,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: 1.19.11 - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: JS Dependency Cache id: js-cache diff --git a/.github/workflows/build-orbit.yaml b/.github/workflows/build-orbit.yaml index 243fb14206..301643d14d 100644 --- a/.github/workflows/build-orbit.yaml +++ b/.github/workflows/build-orbit.yaml @@ -23,7 +23,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Import signing keys env: @@ -41,7 +41,7 @@ jobs: rm certificate.p12 - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: 1.19.11 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1b68040883..5d97bc6d97 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/deploy-fleet-website.yml b/.github/workflows/deploy-fleet-website.yml index e88d8ebd3f..381d4e48bc 100644 --- a/.github/workflows/deploy-fleet-website.yml +++ b/.github/workflows/deploy-fleet-website.yml @@ -34,7 +34,7 @@ jobs: node-version: [16.x] steps: - - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Configure our access credentials for the Heroku CLI - uses: akhileshns/heroku-deploy@79ef2ae4ff9b897010907016b268fd0f88561820 # v3.6.8 @@ -47,14 +47,14 @@ jobs: # Set the Node.js version - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v3 + uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 with: node-version: ${{ matrix.node-version }} # Install the right version of Go for the Golang child process that we are currently using for CSR signing - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: 1.19 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 77c6dd73c5..8b0b3a22fe 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -28,8 +28,8 @@ jobs: contents: read # to read files to check dead links runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: gaurav-nelson/github-action-markdown-link-check@1.0.15 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + - uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec # v1.0.15 with: use-quiet-mode: 'yes' config-file: .github/workflows/config/markdown-link-check-config.json diff --git a/.github/workflows/fleet-and-orbit.yml b/.github/workflows/fleet-and-orbit.yml index 03bc7c98d0..c024de80d9 100644 --- a/.github/workflows/fleet-and-orbit.yml +++ b/.github/workflows/fleet-and-orbit.yml @@ -63,12 +63,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Start tunnel env: @@ -166,12 +166,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Build Fleetctl run: make fleetctl @@ -205,12 +205,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Build desktop.app.tar.gz and osqueryd.app.tar.gz run: | @@ -248,12 +248,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Download macos pre-built apps id: download @@ -312,7 +312,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Download pkg id: download diff --git a/.github/workflows/fleetctl-preview-latest.yml b/.github/workflows/fleetctl-preview-latest.yml index c4573b0118..d991b8aa18 100644 --- a/.github/workflows/fleetctl-preview-latest.yml +++ b/.github/workflows/fleetctl-preview-latest.yml @@ -55,12 +55,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Build Fleetctl run: make fleetctl diff --git a/.github/workflows/fleetctl-workstations-canary.yml b/.github/workflows/fleetctl-workstations-canary.yml index beb9fdf795..ec04485412 100644 --- a/.github/workflows/fleetctl-workstations-canary.yml +++ b/.github/workflows/fleetctl-workstations-canary.yml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Apply configuration profiles and updates - uses: fleetdm/fleet-mdm-gitops@v1.1.0 + uses: fleetdm/fleet-mdm-gitops@15072f2739ef92c6357414ddd86e89b6bf302a2b # v1.1.0 with: FLEET_API_TOKEN: $DOGFOOD_API_TOKEN FLEET_URL: $DOGFOOD_URL diff --git a/.github/workflows/fleetctl-workstations.yml b/.github/workflows/fleetctl-workstations.yml index 166481840c..4d27a29b0c 100644 --- a/.github/workflows/fleetctl-workstations.yml +++ b/.github/workflows/fleetctl-workstations.yml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Apply configuration profiles and updates - uses: fleetdm/fleet-mdm-gitops@v1.1.0 + uses: fleetdm/fleet-mdm-gitops@15072f2739ef92c6357414ddd86e89b6bf302a2b # v1.1.0 with: FLEET_API_TOKEN: $DOGFOOD_API_TOKEN FLEET_URL: $DOGFOOD_URL diff --git a/.github/workflows/generate-desktop-targets.yml b/.github/workflows/generate-desktop-targets.yml index 169ec07c11..5a2d9f1969 100644 --- a/.github/workflows/generate-desktop-targets.yml +++ b/.github/workflows/generate-desktop-targets.yml @@ -35,12 +35,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: '^1.19.11' - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Import signing keys env: @@ -83,12 +83,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: '^1.19.11' - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Generate fleet-desktop.exe run: | @@ -106,12 +106,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: '^1.19.11' - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Generate desktop.tar.gz run: | diff --git a/.github/workflows/generate-nudge-targets.yml b/.github/workflows/generate-nudge-targets.yml index 550bfb5d25..b1771f6703 100644 --- a/.github/workflows/generate-nudge-targets.yml +++ b/.github/workflows/generate-nudge-targets.yml @@ -34,7 +34,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Generate nudge.app.tar.gz run: make nudge-app-tar-gz version=$NUDGE_VERSION out-path=. diff --git a/.github/workflows/generate-osqueryd-targets.yml b/.github/workflows/generate-osqueryd-targets.yml index 496c5490c5..21ed138209 100644 --- a/.github/workflows/generate-osqueryd-targets.yml +++ b/.github/workflows/generate-osqueryd-targets.yml @@ -34,7 +34,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Generate osqueryd.app.tar.gz run: | @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Download and extract osqueryd for linux run: | @@ -70,7 +70,7 @@ jobs: runs-on: windows-latest steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Download osquery msi for Windows run: | diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index bad0456e90..1b8c042a25 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -41,10 +41,10 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Checkout code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} @@ -59,5 +59,5 @@ jobs: # Don't forget to update # docs/Contributing/Testing-and-local-development.md when this # version changes - go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.51.1 + go install github.com/golangci/golangci-lint/cmd/golangci-lint@b87d2c19f4cad414ec8b65c892c8f44279b24372 # v1.51.1 make lint-go diff --git a/.github/workflows/goreleaser-fleet.yaml b/.github/workflows/goreleaser-fleet.yaml index 7dabd1c291..add707579d 100644 --- a/.github/workflows/goreleaser-fleet.yaml +++ b/.github/workflows/goreleaser-fleet.yaml @@ -26,7 +26,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: fetch-depth: 0 # Needed for goreleaser @@ -37,7 +37,7 @@ jobs: password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }} - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ vars.GO_VERSION }} diff --git a/.github/workflows/goreleaser-orbit.yaml b/.github/workflows/goreleaser-orbit.yaml index 3ecf41d91e..613b5fea07 100644 --- a/.github/workflows/goreleaser-orbit.yaml +++ b/.github/workflows/goreleaser-orbit.yaml @@ -25,7 +25,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Note that goreleaser does not like the orbit- prefixed flag unless you use the closed-source # paid version. We pay for goreleaser, but using the closed source build would weaken our @@ -49,12 +49,12 @@ jobs: rm certificate.p12 - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ vars.GO_VERSION }} - name: Run GoReleaser - run: go run github.com/goreleaser/goreleaser@v1.9.2 release --debug --rm-dist --skip-publish -f orbit/goreleaser-macos.yml + run: go run github.com/goreleaser/goreleaser@56c9d09a1b925e2549631c6d180b0a1c2ebfac82 release --debug --rm-dist --skip-publish -f orbit/goreleaser-macos.yml # v1.20.0 env: GITHUB_TOKEN: ${{ secrets.FLEET_RELEASE_GITHUB_PAT }} AC_USERNAME: ${{ secrets.APPLE_USERNAME }} @@ -74,7 +74,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Note that goreleaser does not like the orbit- prefixed flag unless you use the closed-source # paid version. We pay for goreleaser, but using the closed source build would weaken our @@ -83,12 +83,12 @@ jobs: run: git tag $(echo ${{ github.ref_name }} | sed -e 's/orbit-//g') && git tag -d ${{ github.ref_name }} - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ vars.GO_VERSION }} - name: Run GoReleaser - run: go run github.com/goreleaser/goreleaser@v1.9.2 release --debug --rm-dist --skip-publish -f orbit/goreleaser-linux.yml + run: go run github.com/goreleaser/goreleaser@56c9d09a1b925e2549631c6d180b0a1c2ebfac82 release --debug --rm-dist --skip-publish -f orbit/goreleaser-linux.yml # v1.20.0 - name: Upload uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v2 @@ -102,7 +102,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Note that goreleaser does not like the orbit- prefixed flag unless you use the closed-source # paid version. We pay for goreleaser, but using the closed source build would weaken our @@ -111,12 +111,12 @@ jobs: run: git tag $(echo ${{ github.ref_name }} | sed -e 's/orbit-//g') && git tag -d ${{ github.ref_name }} - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ vars.GO_VERSION }} - name: Run GoReleaser - run: go run github.com/goreleaser/goreleaser@v1.9.2 release --debug --rm-dist --skip-publish -f orbit/goreleaser-windows.yml + run: go run github.com/goreleaser/goreleaser@56c9d09a1b925e2549631c6d180b0a1c2ebfac82 release --debug --rm-dist --skip-publish -f orbit/goreleaser-windows.yml # v1.20.0 - name: Upload uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v2 diff --git a/.github/workflows/goreleaser-snapshot-fleet.yaml b/.github/workflows/goreleaser-snapshot-fleet.yaml index ad0770c9e6..185c0d1099 100644 --- a/.github/workflows/goreleaser-snapshot-fleet.yaml +++ b/.github/workflows/goreleaser-snapshot-fleet.yaml @@ -36,7 +36,7 @@ jobs: environment: Docker Hub steps: - name: Checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Login to Docker Hub uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a @@ -45,7 +45,7 @@ jobs: password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }} - name: Set up Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: 1.19.11 diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index b388ef8b6c..6bf7f82e88 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -169,7 +169,7 @@ jobs: needs: [gen, login] steps: - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Install dependencies run: | @@ -225,12 +225,12 @@ jobs: fleetctl config set --address ${{ needs.gen.outputs.address }} --token ${{ needs.login.outputs.token }} - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: '^1.19.11' - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Build Fleetctl run: make fleetctl diff --git a/.github/workflows/pr-helm.yaml b/.github/workflows/pr-helm.yaml index 1bb2c333da..c81c21f7b4 100644 --- a/.github/workflows/pr-helm.yaml +++ b/.github/workflows/pr-helm.yaml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: checkout - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: create temp dir run: mkdir -p helm-temp - name: helm template -- default values diff --git a/.github/workflows/push-osquery-perf-to-ecr.yml b/.github/workflows/push-osquery-perf-to-ecr.yml index 0b17bbbf15..c905c92e08 100644 --- a/.github/workflows/push-osquery-perf-to-ecr.yml +++ b/.github/workflows/push-osquery-perf-to-ecr.yml @@ -36,7 +36,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Configure AWS credentials uses: aws-actions/configure-aws-credentials@05b148adc31e091bafbaf404f745055d4d3bc9d2 # v1 diff --git a/.github/workflows/release-helm.yaml b/.github/workflows/release-helm.yaml index 208e2d8e06..91ef4e34c1 100644 --- a/.github/workflows/release-helm.yaml +++ b/.github/workflows/release-helm.yaml @@ -24,7 +24,7 @@ jobs: contents: write # to push helm charts runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - uses: stefanprodan/helm-gh-pages@0ad2bb377311d61ac04ad9eb6f252fb68e207260 with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/test-db-changes.yml b/.github/workflows/test-db-changes.yml index 8796a75104..7f6f9f9440 100644 --- a/.github/workflows/test-db-changes.yml +++ b/.github/workflows/test-db-changes.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: '^1.19.11' - name: Checkout Code diff --git a/.github/workflows/test-go.yaml b/.github/workflows/test-go.yaml index ed938f9c02..f61a24ab0c 100644 --- a/.github/workflows/test-go.yaml +++ b/.github/workflows/test-go.yaml @@ -50,12 +50,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Pre-starting dependencies here means they are ready to go when we need them. - name: Start Infra Dependencies diff --git a/.github/workflows/test-native-tooling-packaging.yml b/.github/workflows/test-native-tooling-packaging.yml index 99aeaa32a0..c320dad5ee 100644 --- a/.github/workflows/test-native-tooling-packaging.yml +++ b/.github/workflows/test-native-tooling-packaging.yml @@ -45,12 +45,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Install Go Dependencies run: make deps-go diff --git a/.github/workflows/test-packaging.yml b/.github/workflows/test-packaging.yml index e2afc70f01..97f67e28ae 100644 --- a/.github/workflows/test-packaging.yml +++ b/.github/workflows/test-packaging.yml @@ -69,12 +69,12 @@ jobs: run: docker pull fleetdm/wix:latest & - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # It seems faster not to cache Go dependencies - name: Install Go Dependencies diff --git a/.github/workflows/test-website.yml b/.github/workflows/test-website.yml index 89e36b621a..a8a59bcedb 100644 --- a/.github/workflows/test-website.yml +++ b/.github/workflows/test-website.yml @@ -32,11 +32,11 @@ jobs: node-version: [16.x] steps: - - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # Set the Node.js version - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v3 + uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 with: node-version: ${{ matrix.node-version }} diff --git a/.github/workflows/test-yml-specs.yml b/.github/workflows/test-yml-specs.yml index 0558ef42b7..b752451d15 100644 --- a/.github/workflows/test-yml-specs.yml +++ b/.github/workflows/test-yml-specs.yml @@ -37,12 +37,12 @@ jobs: steps: - name: Install Go - uses: actions/setup-go@v4.0.1 + uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version: ${{ matrix.go-version }} - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Run apply spec tests run: | diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 144085dbea..61982097d9 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -36,7 +36,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: JS Dependency Cache id: js-cache @@ -69,7 +69,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: JS Dependency Cache id: js-cache diff --git a/.github/workflows/tfvalidate.yml b/.github/workflows/tfvalidate.yml index ce24791986..05da7c6e6e 100644 --- a/.github/workflows/tfvalidate.yml +++ b/.github/workflows/tfvalidate.yml @@ -31,10 +31,10 @@ jobs: steps: - name: Clone repo - uses: actions/checkout@v3 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Install terraform - uses: hashicorp/setup-terraform@v2 + uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # v2.0.3 with: terraform_version: 1.3.0