Merge pull request #11 from aaronhmiller/patch_third_parties

specifying exact workflow versions per OX

.github/workflows/branch-build-push.yaml

@@ -11,22 +11,22 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.6.0
       -
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v2.2.0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v2.10.0
       -
         name: Login to Docker Hub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v2.2.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       -
         name: Branch build and push
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v3.3.1
         with:
           file: ./app/Dockerfile
           context: ./app

.github/workflows/ci-test.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@main
+    - uses: actions/checkout@v3.6.0
     - name: Run the app
       run: docker-compose up -d
     - name: Test app

.github/workflows/create-visualization.yaml

@@ -8,9 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@main
+        uses: actions/checkout@v3.6.0
       - name: Update diagram
-        uses: githubocto/repo-visualizer@main
+        uses: githubocto/repo-visualizer@0.9.1
         with:
           excluded_paths: "diagram.svg,app/.dockerignore,.github,.gitignore,LICENSE"
           branch: diagram

.github/workflows/tagged-build-push.yaml

@@ -13,14 +13,14 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.6.0
       -
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v2.2.0
       -
         name: Docker meta
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v4.6.0
         with:
           images: |
             ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }}
@@ -31,16 +31,16 @@ jobs:
             latest=auto
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v2.10.0
       -
         name: Login to Docker Hub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v2.2.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       -
         name: Tagged build and push
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v3.3.1
         with:
           file: ./app/Dockerfile
           context: ./app