From 0559115a18ba8a74d15a1f0eb57c705a2986ae97 Mon Sep 17 00:00:00 2001
From: Francesco Medas <104889824+frankmeds@users.noreply.github.com>
Date: Tue, 28 May 2024 21:36:03 +0400
Subject: [PATCH] feat: use specific commit actions version (#6)

---
 .github/workflows/cicd-prd.yml | 10 +++++-----
 .github/workflows/cicd-stg.yml | 10 +++++-----
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/cicd-prd.yml b/.github/workflows/cicd-prd.yml
index 667afb7..50962b1 100644
--- a/.github/workflows/cicd-prd.yml
+++ b/.github/workflows/cicd-prd.yml
@@ -31,7 +31,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev/prj-p-devops-services-tvwmrf63/zilliqa-public
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           submodules: recursive
           ref: ${{ github.event.pull_request.head.ref }}
@@ -40,7 +40,7 @@ jobs:
 
       - name: "Authenticate to Google Cloud - production"
         id: google-auth
-        uses: "google-github-actions/auth@v1"
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa"
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"
@@ -48,7 +48,7 @@ jobs:
           create_credentials_file: true
 
       - name: Login to the registry - production
-        uses: docker/login-action@v2
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ${{ env.DOCKER_DOMAIN }}
           username: "oauth2accesstoken"
@@ -115,7 +115,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           repository: Zilliqa/devops
           token: ${{ env.GITHUB_PAT }}
@@ -125,7 +125,7 @@ jobs:
 
       - name: Authenticate to Google Cloud
         id: google-auth
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"
diff --git a/.github/workflows/cicd-stg.yml b/.github/workflows/cicd-stg.yml
index ba8f5c8..639fc3d 100644
--- a/.github/workflows/cicd-stg.yml
+++ b/.github/workflows/cicd-stg.yml
@@ -36,7 +36,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev/prj-d-devops-services-4dgwlsse/zilliqa-public
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           submodules: recursive
           ref: ${{ github.event.pull_request.head.ref }}
@@ -45,7 +45,7 @@ jobs:
 
       - name: "Authenticate to Google Cloud - staging"
         id: google-auth
-        uses: "google-github-actions/auth@v1"
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa"
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"
@@ -53,7 +53,7 @@ jobs:
           create_credentials_file: true
 
       - name: Login to the registry - staging
-        uses: docker/login-action@v2
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ${{ env.DOCKER_DOMAIN }}
           username: "oauth2accesstoken"
@@ -105,7 +105,7 @@ jobs:
       REGISTRY: asia-docker.pkg.dev
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
         with:
           repository: Zilliqa/devops
           token: ${{ env.GITHUB_PAT }}
@@ -115,7 +115,7 @@ jobs:
 
       - name: Authenticate to Google Cloud
         id: google-auth
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa
         with:
           token_format: "access_token"
           workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}"