feat: use specific commit actions version (#6)

Zilliqa · May 28, 2024 · 0559115 · 0559115
1 parent b310a91
commit 0559115
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/cicd-prd.yml b/.github/workflows/cicd-prd.yml
@@ -31,7 +31,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev/prj-p-devops-services-tvwmrf63/zilliqa-public
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           submodules: recursive
           ref: ${{ github.event.pull_request.head.ref }}
@@ -40,15 +40,15 @@ jobs:
 
       - name: "Authenticate to Google Cloud - production"
         id: google-auth
-        uses: "google-github-actions/auth@v1"
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa"
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"
           service_account: "${{ secrets.GCP_PRD_GITHUB_SA_DOCKER_REGISTRY }}"
           create_credentials_file: true
 
       - name: Login to the registry - production
-        uses: docker/login-action@v2
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ${{ env.DOCKER_DOMAIN }}
           username: "oauth2accesstoken"
@@ -115,7 +115,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           repository: Zilliqa/devops
           token: ${{ env.GITHUB_PAT }}
@@ -125,7 +125,7 @@ jobs:
 
       - name: Authenticate to Google Cloud
         id: google-auth
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"

diff --git a/.github/workflows/cicd-stg.yml b/.github/workflows/cicd-stg.yml
@@ -36,7 +36,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev/prj-d-devops-services-4dgwlsse/zilliqa-public
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           submodules: recursive
           ref: ${{ github.event.pull_request.head.ref }}
@@ -45,15 +45,15 @@ jobs:
 
       - name: "Authenticate to Google Cloud - staging"
         id: google-auth
-        uses: "google-github-actions/auth@v1"
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa"
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"
           service_account: "${{ secrets.GCP_STG_GITHUB_SA_DOCKER_REGISTRY }}"
           create_credentials_file: true
 
       - name: Login to the registry - staging
-        uses: docker/login-action@v2
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ${{ env.DOCKER_DOMAIN }}
           username: "oauth2accesstoken"
@@ -105,7 +105,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           repository: Zilliqa/devops
           token: ${{ env.GITHUB_PAT }}
@@ -115,7 +115,7 @@ jobs:
 
       - name: Authenticate to Google Cloud
         id: google-auth
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"