From 0d1a175b587b71e87cbb1ed37001a686ba1b8237 Mon Sep 17 00:00:00 2001 From: Julien Doutre <36448022+juliendoutre@users.noreply.github.com> Date: Mon, 16 Mar 2026 14:41:56 +0100 Subject: [PATCH] Pin GitHub Actions --- .github/workflows/claude-code-review.yml | 4 ++-- .github/workflows/claude.yml | 4 ++-- .github/workflows/docker-compose-integration.yml | 8 ++++---- .github/workflows/e2e-tests.yml | 10 +++++----- .github/workflows/print-service.yml | 6 +++--- .github/workflows/shared-infra.yml | 4 ++-- .github/workflows/sticker-award.yml | 6 +++--- .github/workflows/sticker-catalogue.yml | 6 +++--- .github/workflows/user-management.yml | 6 +++--- .github/workflows/web-backend.yml | 2 +- .github/workflows/web-frontend.yml | 2 +- 11 files changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 4f6145be..3c68ee90 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -27,13 +27,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 1 - name: Run Claude Code Review id: claude-review - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@cd77b50d2b0808657f8e6774085c8bf54484351c # v1.0.72 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} plugin_marketplaces: 'https://github.com/anthropics/claude-code.git' diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 79fe0564..9f9331ff 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -26,13 +26,13 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 1 - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@cd77b50d2b0808657f8e6774085c8bf54484351c # v1.0.72 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} diff --git a/.github/workflows/docker-compose-integration.yml b/.github/workflows/docker-compose-integration.yml index 2a828f13..65dd8510 100644 --- a/.github/workflows/docker-compose-integration.yml +++ b/.github/workflows/docker-compose-integration.yml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Install mise run: | @@ -47,7 +47,7 @@ jobs: run: mise run test:services - name: Setup Node.js for E2E tests - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '22' cache: 'npm' @@ -74,7 +74,7 @@ jobs: CI: true - name: Upload Playwright report on failure - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: playwright-report diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml index cf79c454..61b76025 100644 --- a/.github/workflows/e2e-tests.yml +++ b/.github/workflows/e2e-tests.yml @@ -34,10 +34,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1 with: role-to-assume: ${{ secrets.AWS_ROLE_ARN }} role-session-name: GitHub_E2E_Tests @@ -54,7 +54,7 @@ jobs: echo "Deployment URL: ${BASE_URL}" - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '22' cache: 'npm' @@ -76,7 +76,7 @@ jobs: BASE_URL: ${{ steps.get-url.outputs.BASE_URL }} - name: Upload Playwright report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: always() with: name: playwright-report @@ -84,7 +84,7 @@ jobs: retention-days: 7 - name: Upload test results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 if: failure() with: name: test-results diff --git a/.github/workflows/print-service.yml b/.github/workflows/print-service.yml index 00ef15ae..1f429631 100644 --- a/.github/workflows/print-service.yml +++ b/.github/workflows/print-service.yml @@ -327,9 +327,9 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: "20" - name: Install CDK @@ -340,7 +340,7 @@ jobs: run: | cd shared/lib/shared-constructs npm i - - uses: actions/setup-dotnet@v4 + - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 with: dotnet-version: "10.0.x" - name: Configure AWS credentials diff --git a/.github/workflows/shared-infra.yml b/.github/workflows/shared-infra.yml index 026d214b..30c88ddd 100644 --- a/.github/workflows/shared-infra.yml +++ b/.github/workflows/shared-infra.yml @@ -33,9 +33,9 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: "20" - name: Install CDK diff --git a/.github/workflows/sticker-award.yml b/.github/workflows/sticker-award.yml index 3e877411..e4af1b4d 100644 --- a/.github/workflows/sticker-award.yml +++ b/.github/workflows/sticker-award.yml @@ -161,9 +161,9 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: "20" - name: Install CDK @@ -174,7 +174,7 @@ jobs: run: | cd shared/lib/shared-constructs npm i - - uses: actions/setup-go@v5 + - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 - name: Configure AWS credentials uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df with: diff --git a/.github/workflows/sticker-catalogue.yml b/.github/workflows/sticker-catalogue.yml index 7f728ae6..06eb9dd4 100644 --- a/.github/workflows/sticker-catalogue.yml +++ b/.github/workflows/sticker-catalogue.yml @@ -159,9 +159,9 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: "20" - name: Install CDK @@ -173,7 +173,7 @@ jobs: cd shared/lib/shared-constructs npm i - name: Set up Java 21 for x64 - uses: actions/setup-java@v4 + uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 with: java-version: "21" distribution: "corretto" diff --git a/.github/workflows/user-management.yml b/.github/workflows/user-management.yml index c351e9db..450f292a 100644 --- a/.github/workflows/user-management.yml +++ b/.github/workflows/user-management.yml @@ -298,9 +298,9 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node - uses: actions/setup-node@v3 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: "20" - name: Install CDK @@ -311,7 +311,7 @@ jobs: run: | cd shared/lib/shared-constructs npm i - - uses: actions/setup-dotnet@v4 + - uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 with: dotnet-version: "10.0.x" - name: Configure AWS credentials diff --git a/.github/workflows/web-backend.yml b/.github/workflows/web-backend.yml index 14bf6077..bd5e0980 100644 --- a/.github/workflows/web-backend.yml +++ b/.github/workflows/web-backend.yml @@ -125,7 +125,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node.js uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 with: diff --git a/.github/workflows/web-frontend.yml b/.github/workflows/web-frontend.yml index ea4a9fee..63cdd420 100644 --- a/.github/workflows/web-frontend.yml +++ b/.github/workflows/web-frontend.yml @@ -95,7 +95,7 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Set up Node.js uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 with: