diff --git a/.github/workflows/benchmark.yaml b/.github/workflows/benchmark.yaml index ee479f6a0..1d6df1893 100644 --- a/.github/workflows/benchmark.yaml +++ b/.github/workflows/benchmark.yaml @@ -29,7 +29,7 @@ jobs: ] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # We need to get all the git tags to make version injection work. See VERSION in Makefile for more detail. fetch-depth: 0 diff --git a/.github/workflows/build-and-test-msi.yaml b/.github/workflows/build-and-test-msi.yaml index d77606a4a..c62ef7d39 100644 --- a/.github/workflows/build-and-test-msi.yaml +++ b/.github/workflows/build-and-test-msi.yaml @@ -63,7 +63,7 @@ jobs: run: | python -m pip install --upgrade pip pip install awscli - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ needs.get-tag-name.outputs.tag }} fetch-depth: 0 @@ -175,7 +175,7 @@ jobs: run: | python -m pip install --upgrade pip pip install awscli - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ needs.get-tag-name.outputs.tag }} fetch-depth: 0 diff --git a/.github/workflows/build-pkg.yaml b/.github/workflows/build-pkg.yaml index ffc54daeb..a0b1870bf 100644 --- a/.github/workflows/build-pkg.yaml +++ b/.github/workflows/build-pkg.yaml @@ -37,7 +37,7 @@ jobs: ] timeout-minutes: 60 steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ inputs.tag }} fetch-depth: 0 diff --git a/.github/workflows/ci-docs.yaml b/.github/workflows/ci-docs.yaml index 079a53c7d..f571544ff 100644 --- a/.github/workflows/ci-docs.yaml +++ b/.github/workflows/ci-docs.yaml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Pull latest awslabs/git-secrets repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: awslabs/git-secrets ref: 1.3.0 @@ -38,7 +38,7 @@ jobs: - name: Install git secrets from source run: sudo make install working-directory: git-secrets - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Scan repository for git secrets run: | git secrets --register-aws @@ -89,7 +89,7 @@ jobs: mdlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: avto-dev/markdown-lint@04d43ee9191307b50935a753da3b775ab695eceb # v1.5.0 with: args: '**/*.md' diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index b8820adf9..b2a917b1e 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Pull latest awslabs/git-secrets repo - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: awslabs/git-secrets ref: 1.3.0 @@ -41,7 +41,7 @@ jobs: - name: Install git secrets from source run: sudo make install working-directory: git-secrets - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Scan repository for git secrets run: | git secrets --register-aws @@ -53,7 +53,7 @@ jobs: os: [macos-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 with: go-version-file: go.mod @@ -71,7 +71,7 @@ jobs: run: | git config --global core.autocrlf false git config --global core.eol lf - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 with: # Since this repository is not meant to be used as a library, @@ -84,7 +84,7 @@ jobs: name: lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 with: go-version-file: go.mod @@ -115,7 +115,7 @@ jobs: name: ShellCheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Run ShellCheck uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0 with: @@ -124,7 +124,7 @@ jobs: go-mod-tidy-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 with: go-version-file: go.mod @@ -135,7 +135,7 @@ jobs: check-licenses: runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1 with: go-version-file: go.mod @@ -155,7 +155,7 @@ jobs: test-command: ['test-e2e-vm-serial', 'test-e2e-container'] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # We need to get all the git tags to make version injection work. See VERSION in Makefile for more detail. fetch-depth: 0 @@ -219,7 +219,7 @@ jobs: run: | takeown /F C:\actions-runner\_work\finch /R Remove-Item C:\actions-runner\_work\finch\finch -Recurse -Force -ErrorAction Ignore - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: # We need to get all the git tags to make version injection work. See VERSION in Makefile for more detail. fetch-depth: 0 @@ -283,7 +283,7 @@ jobs: mdlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - uses: avto-dev/markdown-lint@04d43ee9191307b50935a753da3b775ab695eceb # v1.5.0 with: args: '**/*.md' diff --git a/.github/workflows/release-automation.yaml b/.github/workflows/release-automation.yaml index fe56727c2..73fee8fa3 100644 --- a/.github/workflows/release-automation.yaml +++ b/.github/workflows/release-automation.yaml @@ -12,7 +12,7 @@ jobs: outputs: tag: ${{ steps.latest-tag.outputs.tag }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 - name: 'Get the latest tag' diff --git a/.github/workflows/release-homebrew.yaml b/.github/workflows/release-homebrew.yaml index c95cf3eb6..f93d72f06 100644 --- a/.github/workflows/release-homebrew.yaml +++ b/.github/workflows/release-homebrew.yaml @@ -13,7 +13,7 @@ jobs: tag: ${{ steps.latesttag.outputs.tag }} version: ${{ steps.latestversion.outputs.version }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 - name: 'Get the latest tag' @@ -53,7 +53,7 @@ jobs: FINCH_TAG: ${{ needs.get-latest-tag.outputs.tag }} FINCH_VERSION: ${{ needs.get-latest-tag.outputs.version }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ env.FINCH_TAG }} fetch-depth: 0 @@ -176,7 +176,7 @@ jobs: FINCH_TAG: ${{ needs.get-latest-tag.outputs.tag }} FINCH_VERSION: ${{ needs.get-latest-tag.outputs.version }} steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ env.FINCH_TAG }} fetch-depth: 0 diff --git a/.github/workflows/sync-submodules-and-deps.yaml b/.github/workflows/sync-submodules-and-deps.yaml index 796a476ef..ff85abf08 100644 --- a/.github/workflows/sync-submodules-and-deps.yaml +++ b/.github/workflows/sync-submodules-and-deps.yaml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: recursive token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/test-pkg.yaml b/.github/workflows/test-pkg.yaml index 8e0d15388..061225e20 100644 --- a/.github/workflows/test-pkg.yaml +++ b/.github/workflows/test-pkg.yaml @@ -40,7 +40,7 @@ jobs: ACCESS_TOKEN: ${{ secrets.FINCH_BOT_TOKEN }} steps: - name: Checkout the tag - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: ref: ${{ inputs.tag }} fetch-depth: 0 diff --git a/.github/workflows/upload-build-to-S3.yaml b/.github/workflows/upload-build-to-S3.yaml index eeb6850cc..49ff197ed 100644 --- a/.github/workflows/upload-build-to-S3.yaml +++ b/.github/workflows/upload-build-to-S3.yaml @@ -16,7 +16,7 @@ jobs: runs-on: [self-hosted, macos, arm64, 14, release] timeout-minutes: 60 steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 persist-credentials: false @@ -45,7 +45,7 @@ jobs: runs-on: [self-hosted, macos, amd64, 14, release] timeout-minutes: 60 steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 persist-credentials: false @@ -77,7 +77,7 @@ jobs: - macos-x86_64-build - macos-aarch64-build steps: - - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 persist-credentials: false