Skip to content

Commit 6fa339f

Browse files
Brijeshthummar02Brijeshthummar02
authored
Infra: Pin actions versions (#922)
1 parent e74ff7a commit 6fa339f

22 files changed

+96
-96
lines changed

‎.github/workflows/backend_tests.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@ jobs:
1919
steps:
2020

2121
- name: Checkout
22-
uses: actions/checkout@v4
22+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
2323
with:
2424
token: ${{ github.token }}
2525
fetch-depth: 0
2626
ref: ${{ github.event.pull_request.head.sha }}
2727

2828
- name: Set up JDK
29-
uses: actions/setup-java@v4
29+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
3030
with:
3131
java-version: '21'
3232
distribution: 'zulu'

‎.github/workflows/block_merge.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ jobs:
66
block_merge:
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: mheap/github-action-required-labels@v5
9+
- uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # infered from @v5
1010
with:
1111
mode: exactly
1212
count: 0

‎.github/workflows/branch-deploy.yml

+10-10
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@v4
18+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -27,7 +27,7 @@ jobs:
2727
env:
2828
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2929
- name: Set up JDK
30-
uses: actions/setup-java@v4
30+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
3131
with:
3232
java-version: '21'
3333
distribution: 'zulu'
@@ -40,29 +40,29 @@ jobs:
4040
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
4141
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@v3
43+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
4444
- name: Set up Docker Buildx
4545
id: buildx
46-
uses: docker/setup-buildx-action@v3
46+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
4747
- name: Cache Docker layers
48-
uses: actions/cache@v4
48+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
- name: Configure AWS credentials for Kafka-UI account
55-
uses: aws-actions/configure-aws-credentials@v4
55+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
5656
with:
5757
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
5858
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
5959
aws-region: eu-central-1
6060
- name: Login to Amazon ECR
6161
id: login-ecr
62-
uses: aws-actions/amazon-ecr-login@v2
62+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
6363
- name: Build and push
6464
id: docker_build_and_push
65-
uses: docker/build-push-action@v6
65+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
6666
with:
6767
builder: ${{ steps.buildx.outputs.name }}
6868
context: api
@@ -93,7 +93,7 @@ jobs:
9393
9494
- name: update status check for private deployment
9595
if: ${{ github.event.label.name == 'status/feature_testing' }}
96-
uses: Sibz/github-status-action@v1.1.6
96+
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # infered from @v1.1.6
9797
with:
9898
authToken: ${{secrets.GITHUB_TOKEN}}
9999
context: "Click Details button to open custom deployment page"
@@ -103,7 +103,7 @@ jobs:
103103

104104
- name: update status check for public deployment
105105
if: ${{ github.event.label.name == 'status/feature_testing_public' }}
106-
uses: Sibz/github-status-action@v1.1.6
106+
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # infered from @v1.1.6
107107
with:
108108
authToken: ${{secrets.GITHUB_TOKEN}}
109109
context: "Click Details button to open custom deployment page"

‎.github/workflows/branch-remove.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
if: ${{ (github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public') || (github.event.action == 'closed' && (contains(github.event.pull_request.labels.*.name, 'status/feature_testing') || contains(github.event.pull_request.labels.*.name, 'status/feature_testing_public'))) }}
1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
1717
with:
1818
token: ${{ github.token }}
1919
- name: clone

‎.github/workflows/build-public-image.yml

+9-9
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/image_testing' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@v4
18+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -25,7 +25,7 @@ jobs:
2525
tag='${{ github.event.pull_request.number }}'
2626
echo "tag=${tag}" >> $GITHUB_OUTPUT
2727
- name: Set up JDK
28-
uses: actions/setup-java@v4
28+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
2929
with:
3030
java-version: '21'
3131
distribution: 'zulu'
@@ -38,30 +38,30 @@ jobs:
3838
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
3939
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4040
- name: Set up QEMU
41-
uses: docker/setup-qemu-action@v3
41+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
4242
- name: Set up Docker Buildx
4343
id: buildx
44-
uses: docker/setup-buildx-action@v3
44+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
4545
- name: Cache Docker layers
46-
uses: actions/cache@v4
46+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
4747
with:
4848
path: /tmp/.buildx-cache
4949
key: ${{ runner.os }}-buildx-${{ github.sha }}
5050
restore-keys: |
5151
${{ runner.os }}-buildx-
5252
- name: Configure AWS Credentials
53-
uses: aws-actions/configure-aws-credentials@v4
53+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
5454
with:
5555
aws-region: us-east-1
5656
role-to-assume: ${{ secrets.AWS_ROLE }}
5757
- name: Login to Amazon ECR
5858
id: login-ecr
59-
uses: aws-actions/amazon-ecr-login@v2
59+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
6060
with:
6161
registry-type: 'public'
6262
- name: Build and push
6363
id: docker_build_and_push
64-
uses: docker/build-push-action@v6
64+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
6565
with:
6666
builder: ${{ steps.buildx.outputs.name }}
6767
context: api
@@ -72,7 +72,7 @@ jobs:
7272
cache-from: type=local,src=/tmp/.buildx-cache
7373
cache-to: type=local,dest=/tmp/.buildx-cache
7474
- name: make comment with private deployment link
75-
uses: peter-evans/create-or-update-comment@v4
75+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # infered from @v4
7676
with:
7777
issue-number: ${{ github.event.pull_request.number }}
7878
body: |

‎.github/workflows/codeql-analysis.yml

+5-5
Original file line numberDiff line numberDiff line change
@@ -38,24 +38,24 @@ jobs:
3838

3939
steps:
4040
- name: Checkout repository
41-
uses: actions/checkout@v4
41+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
4242
with:
4343
token: ${{ github.token }}
4444

4545
- name: Initialize CodeQL
46-
uses: github/codeql-action/init@v3
46+
uses: github/codeql-action/init@1a7989f3955e0c69f0e0ccc14aee54a387a0fd31 # infered from @v3
4747
with:
4848
languages: ${{ matrix.language }}
4949

5050
- name: Set up JDK
51-
uses: actions/setup-java@v4
51+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
5252
with:
5353
java-version: '21'
5454
distribution: 'zulu'
5555
cache: 'gradle'
5656

5757
- name: Autobuild
58-
uses: github/codeql-action/autobuild@v3
58+
uses: github/codeql-action/autobuild@bed2a47f201e917459bc40343380c570a730ff06 # infered from @v3
5959

6060
- name: Perform CodeQL Analysis
61-
uses: github/codeql-action/analyze@v3
61+
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe # infered from @v3

‎.github/workflows/cve_checks.yml

+7-7
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@v4
21+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
2222
with:
2323
token: ${{ github.token }}
2424

2525
- name: Set up JDK
26-
uses: actions/setup-java@v4
26+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
2727
with:
2828
java-version: '21'
2929
distribution: 'zulu'
@@ -39,21 +39,21 @@ jobs:
3939
-Pversion=latest
4040
4141
- name: Set up QEMU
42-
uses: docker/setup-qemu-action@v3
42+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
4343

4444
- name: Set up Docker Buildx
45-
uses: docker/setup-buildx-action@v3
45+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
4646

4747
- name: Cache Docker layers
48-
uses: actions/cache@v4
48+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
5555
- name: Build docker image
56-
uses: docker/build-push-action@v6
56+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
5757
with:
5858
builder: ${{ steps.buildx.outputs.name }}
5959
context: api
@@ -68,7 +68,7 @@ jobs:
6868
cache-to: type=local,dest=/tmp/.buildx-cache
6969

7070
- name: Run CVE checks
71-
uses: aquasecurity/trivy-action@0.29.0
71+
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # infered from @v0.29.0
7272
with:
7373
image-ref: "ghcr.io/kafbat/kafka-ui:latest"
7474
format: "table"

‎.github/workflows/delete-public-image.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,14 @@ jobs:
1515
tag='${{ github.event.pull_request.number }}'
1616
echo "tag=${tag}" >> $GITHUB_OUTPUT
1717
- name: Configure AWS credentials for Kafka-UI account
18-
uses: aws-actions/configure-aws-credentials@v4
18+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
1919
with:
2020
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
2121
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
2222
aws-region: us-east-1
2323
- name: Login to Amazon ECR
2424
id: login-ecr
25-
uses: aws-actions/amazon-ecr-login@v2
25+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
2626
with:
2727
registry-type: 'public'
2828
- name: Remove from ECR

‎.github/workflows/docker_build.yml

+8-8
Original file line numberDiff line numberDiff line change
@@ -18,26 +18,26 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@v4
21+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
2222
with:
2323
ref: ${{ github.event.pull_request.head.sha }}
2424
token: ${{ github.token }}
2525

2626
- name: Download artifacts
27-
uses: actions/download-artifact@v4
27+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
2828
with:
2929
name: kafbat-ui-${{ inputs.version }}
3030
path: api/build/libs
3131

3232
- name: Set up QEMU
33-
uses: docker/setup-qemu-action@v3
33+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
3434

3535
- name: Set up Docker Buildx
3636
id: buildx
37-
uses: docker/setup-buildx-action@v3
37+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
3838

3939
- name: Cache Docker layers
40-
uses: actions/cache@v4
40+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
4141
with:
4242
path: /tmp/.buildx-cache
4343
key: ${{ runner.os }}-buildx-${{ inputs.sha }}
@@ -49,7 +49,7 @@ jobs:
4949
# Also containerd is one of the option to allow preserving provenance attestations:
5050
# https://docs.docker.com/build/attestations/#creating-attestations
5151
- name: Setup docker with containerd
52-
uses: crazy-max/ghaction-setup-docker@v3
52+
uses: crazy-max/ghaction-setup-docker@635d07c09dc2b52072362e9bb37e7e789767106d # infered from @v3
5353
with:
5454
daemon-config: |
5555
{
@@ -60,7 +60,7 @@ jobs:
6060
6161
- name: Build docker image
6262
id: docker_build
63-
uses: docker/build-push-action@v6
63+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
6464
with:
6565
builder: ${{ steps.buildx.outputs.name }}
6666
context: api
@@ -81,7 +81,7 @@ jobs:
8181
docker image save kafka-ui:temp > /tmp/image.tar
8282
8383
- name: Upload docker image
84-
uses: actions/upload-artifact@v4
84+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # infered from @v4
8585
with:
8686
name: image
8787
path: /tmp/image.tar

‎.github/workflows/docker_publish.yml

+6-6
Original file line numberDiff line numberDiff line change
@@ -26,14 +26,14 @@ jobs:
2626
steps:
2727

2828
- name: Download docker image
29-
uses: actions/download-artifact@v4
29+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
3030
with:
3131
name: image
3232
path: /tmp
3333

3434
# setup containerd to preserve provenance attestations :https://docs.docker.com/build/attestations/#creating-attestations
3535
- name: Setup docker with containerd
36-
uses: crazy-max/ghaction-setup-docker@v3
36+
uses: crazy-max/ghaction-setup-docker@635d07c09dc2b52072362e9bb37e7e789767106d # infered from @v3
3737
with:
3838
daemon-config: |
3939
{
@@ -48,31 +48,31 @@ jobs:
4848
4949
- name: Login to docker.io
5050
if: matrix.registry == 'docker.io'
51-
uses: docker/login-action@v3
51+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # infered from @v3
5252
with:
5353
registry: ${{ matrix.registry }}
5454
username: ${{ secrets.DOCKERHUB_USERNAME }}
5555
password: ${{ secrets.DOCKERHUB_TOKEN }}
5656

5757
- name: Login to ghcr.io
5858
if: matrix.registry == 'ghcr.io'
59-
uses: docker/login-action@v3
59+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # infered from @v3
6060
with:
6161
registry: ${{ matrix.registry }}
6262
username: ${{ github.actor }}
6363
password: ${{ secrets.GITHUB_TOKEN }}
6464

6565
- name: Configure AWS credentials
6666
if: matrix.registry == 'ecr'
67-
uses: aws-actions/configure-aws-credentials@v4
67+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
6868
with:
6969
aws-region: us-east-1 # This region only for public ECR
7070
role-to-assume: ${{ secrets.AWS_ROLE }}
7171

7272
- name: Login to public ECR
7373
if: matrix.registry == 'ecr'
7474
id: login-ecr-public
75-
uses: aws-actions/amazon-ecr-login@v2
75+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v2
7676
with:
7777
registry-type: public
7878

0 commit comments

Comments
 (0)