Skip to content

Commit 2443cb4

Browse files
hashicorp-tsccr[bot]hashicorp-tsccr[bot]
authored
chore(deps): pin trusted workflows based on HashiCorp TSCCR (#3672)
Bumping GitHub Actions version to latest TSCCR release. Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
1 parent 6b78c57 commit 2443cb4

File tree

6 files changed

+28
-28
lines changed

6 files changed

+28
-28
lines changed

‎.github/workflows/docker.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
steps:
1919
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2020
- name: Set up Docker Buildx
21-
uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
21+
uses: docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4 # v3.4.0
2222
- name: Cache Docker layers
2323
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
2424
with:
@@ -46,7 +46,7 @@ jobs:
4646
GIT_SHA=$(git rev-parse HEAD)
4747
echo "git-sha=$GIT_SHA" >> $GITHUB_OUTPUT
4848
- name: Build and push
49-
uses: docker/build-push-action@15560696de535e4014efeff63c48f16952e52dd1 # v6.2.0
49+
uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3.0
5050
with:
5151
pull: true
5252
push: true

‎.github/workflows/integration.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -68,13 +68,13 @@ jobs:
6868
SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
6969
GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}
7070
- name: Upload dist
71-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
71+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7272
if: ${{ !inputs.skip_setup }}
7373
with:
7474
name: dist
7575
path: dist
7676
- name: Upload edge-provider bindings
77-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
77+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7878
if: ${{ !inputs.skip_setup }}
7979
with:
8080
name: edge-provider-bindings
@@ -140,12 +140,12 @@ jobs:
140140
go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}
141141
go-${{ runner.os }}-
142142
- name: Download dist
143-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
143+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
144144
with:
145145
name: dist
146146
path: dist
147147
- name: Download edge-provider bindings
148-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
148+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
149149
with:
150150
name: edge-provider-bindings
151151
path: test/edge-provider-bindings
@@ -224,12 +224,12 @@ jobs:
224224
go-version: 1.18.x
225225
cache: false # This is disabled because we don't have a go.sum file and setup-go expects it to use caching. Thus, caching is always broken anyways
226226
- name: Download dist
227-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
227+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
228228
with:
229229
name: dist
230230
path: dist
231231
- name: Download edge-provider bindings
232-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
232+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
233233
with:
234234
name: edge-provider-bindings
235235
path: test/edge-provider-bindings

‎.github/workflows/provider-integration.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
cd test && yarn
7474
- name: Upload dist
7575
if: ${{ !inputs.skip_setup }}
76-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
76+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7777
with:
7878
name: dist
7979
path: dist
@@ -98,7 +98,7 @@ jobs:
9898
steps:
9999
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
100100
- name: Download dist
101-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
101+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
102102
with:
103103
name: dist
104104
path: dist
@@ -160,7 +160,7 @@ jobs:
160160
with:
161161
go-version: 1.16.x
162162
- name: Download dist
163-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
163+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
164164
with:
165165
name: dist
166166
path: dist

‎.github/workflows/release.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -68,12 +68,12 @@ jobs:
6868
env:
6969
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }}
7070
- name: Upload artifact
71-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
71+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7272
with:
7373
name: dist
7474
path: dist
7575
- name: Upload edge-provider bindings
76-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
76+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7777
if: ${{ !inputs.skip_setup }}
7878
with:
7979
name: edge-provider-bindings
@@ -160,7 +160,7 @@ jobs:
160160
run: |
161161
yarn install --frozen-lockfile
162162
- name: Download build artifacts
163-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
163+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
164164
with:
165165
name: dist
166166
- name: Release to github
@@ -181,7 +181,7 @@ jobs:
181181
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
182182
steps:
183183
- name: Download build artifacts
184-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
184+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
185185
with:
186186
name: dist
187187
path: dist
@@ -205,7 +205,7 @@ jobs:
205205
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
206206
steps:
207207
- name: Download build artifacts
208-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
208+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
209209
with:
210210
name: dist
211211
path: dist
@@ -241,7 +241,7 @@ jobs:
241241
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
242242
steps:
243243
- name: Download build artifacts
244-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
244+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
245245
with:
246246
name: dist
247247
path: dist
@@ -271,7 +271,7 @@ jobs:
271271
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
272272
steps:
273273
- name: Download dist
274-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
274+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
275275
with:
276276
name: dist
277277
path: dist
@@ -295,7 +295,7 @@ jobs:
295295
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
296296
steps:
297297
- name: Download dist
298-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
298+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
299299
with:
300300
name: dist
301301
path: dist

‎.github/workflows/release_next.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -74,12 +74,12 @@ jobs:
7474
env:
7575
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }}
7676
- name: Upload artifact
77-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
77+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
7878
with:
7979
name: dist
8080
path: dist
8181
- name: Upload edge-provider bindings
82-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
82+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
8383
if: ${{ !inputs.skip_setup }}
8484
with:
8585
name: edge-provider-bindings
@@ -152,7 +152,7 @@ jobs:
152152
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
153153
steps:
154154
- name: Download build artifacts
155-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
155+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
156156
with:
157157
name: dist
158158
path: dist
@@ -176,7 +176,7 @@ jobs:
176176
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
177177
steps:
178178
- name: Download build artifacts
179-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
179+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
180180
with:
181181
name: dist
182182
path: dist
@@ -211,7 +211,7 @@ jobs:
211211
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
212212
steps:
213213
- name: Download dist
214-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
214+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
215215
with:
216216
name: dist
217217
path: dist
@@ -240,7 +240,7 @@ jobs:
240240
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
241241
steps:
242242
- name: Download dist
243-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
243+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
244244
with:
245245
name: dist
246246
path: dist
@@ -261,7 +261,7 @@ jobs:
261261
image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
262262
steps:
263263
- name: Download dist
264-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
264+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
265265
with:
266266
name: dist
267267
path: dist

‎.github/workflows/yarn-upgrade.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
git add .
6464
git diff --patch --staged > ./upgrade.patch
6565
- name: Upload Patch
66-
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
66+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
6767
with:
6868
name: upgrade.patch
6969
path: ./upgrade.patch
@@ -77,7 +77,7 @@ jobs:
7777
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
7878

7979
- name: Download patch
80-
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
80+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
8181
with:
8282
name: upgrade.patch
8383

0 commit comments

Comments
 (0)