Skip to content

Commit 64c1496

Browse files
haya14busahaya14busa
authored
Merge pull request #768 from reviewdog/pinact-action-golangci-lint
Pin GitHub Actions with commit SHA using pinact
2 parents 778ee8b + 1a24cbe commit 64c1496

File tree

4 files changed

+28
-28
lines changed

4 files changed

+28
-28
lines changed

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,11 +39,11 @@ jobs:
3939

4040
steps:
4141
- name: Checkout repository
42-
uses: actions/checkout@v4
42+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4343

4444
# Initializes the CodeQL tools for scanning.
4545
- name: Initialize CodeQL
46-
uses: github/codeql-action/init@v3
46+
uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
4747
with:
4848
languages: ${{ matrix.language }}
4949
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -54,7 +54,7 @@ jobs:
5454
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5555
# If this step fails, then you should remove it and run the build manually (see below)
5656
- name: Autobuild
57-
uses: github/codeql-action/autobuild@v3
57+
uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
5858

5959
# ℹ️ Command-line programs to run using the OS shell.
6060
# 📚 https://git.io/JvXDl
@@ -68,4 +68,4 @@ jobs:
6868
# make release
6969

7070
- name: Perform CodeQL Analysis
71-
uses: github/codeql-action/analyze@v3
71+
uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,24 +14,24 @@ jobs:
1414
if: "${{ github.event.action != 'labeled' }}"
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@v4
17+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1818

1919
# Bump version on merging Pull Requests with specific labels.
2020
# (bump:major,bump:minor,bump:patch)
2121
- id: bumpr
2222
if: "${{ !startsWith(github.ref, 'refs/tags/') }}"
23-
uses: haya14busa/action-bumpr@v1
23+
uses: haya14busa/action-bumpr@78ab5a104d20896c9c9122c64221b3aecf1a8cbb # v1.10.0
2424

2525
# Update corresponding major and minor tag.
2626
# e.g. Update v1 and v1.2 when releasing v1.2.3
27-
- uses: haya14busa/action-update-semver@v1
27+
- uses: haya14busa/action-update-semver@fb48464b2438ae82cc78237be61afb4f461265a1 # v1.2.1
2828
if: "${{ !steps.bumpr.outputs.skip }}"
2929
with:
3030
tag: ${{ steps.bumpr.outputs.next_version }}
3131

3232
# Get tag name.
3333
- id: tag
34-
uses: haya14busa/action-cond@v1
34+
uses: haya14busa/action-cond@94f77f7a80cd666cb3155084e428254fea4281fd # v1.2.1
3535
with:
3636
cond: "${{ startsWith(github.ref, 'refs/tags/') }}"
3737
if_true: ${{ github.ref }}
@@ -50,6 +50,6 @@ jobs:
5050
if: ${{ github.event.action == 'labeled' }}
5151
runs-on: ubuntu-latest
5252
steps:
53-
- uses: actions/checkout@v4
53+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5454
- name: Post bumpr status comment
55-
uses: haya14busa/action-bumpr@v1
55+
uses: haya14busa/action-bumpr@78ab5a104d20896c9c9122c64221b3aecf1a8cbb # v1.10.0

‎.github/workflows/reviewdog.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: Check out code into the Go module directory
12-
uses: actions/checkout@v4
12+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1313
- name: golangci-lint
1414
uses: ./
1515
with:
@@ -25,7 +25,7 @@ jobs:
2525
platform: [ubuntu-latest, macos-latest, windows-latest]
2626
runs-on: ${{ matrix.platform }}
2727
steps:
28-
- uses: actions/checkout@v4
28+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2929
- name: golangci-lint (platform)
3030
uses: ./
3131
with:
@@ -39,7 +39,7 @@ jobs:
3939
runs-on: ubuntu-latest
4040
steps:
4141
- name: Check out code into the Go module directory
42-
uses: actions/checkout@v4
42+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4343
- name: golangci-lint w/ github-pr-review
4444
uses: ./
4545
with:
@@ -52,7 +52,7 @@ jobs:
5252
runs-on: ubuntu-latest
5353
steps:
5454
- name: Check out code into the Go module directory
55-
uses: actions/checkout@v4
55+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5656
- name: golangci-lint w/ github-check
5757
uses: ./
5858
with:
@@ -65,7 +65,7 @@ jobs:
6565
name: runner / golangci-lint (workdir)
6666
runs-on: ubuntu-latest
6767
steps:
68-
- uses: actions/checkout@v4
68+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6969
- name: golangci-lint (workdir)
7070
uses: ./
7171
with:
@@ -81,7 +81,7 @@ jobs:
8181
runs-on: ubuntu-latest
8282
steps:
8383
- name: Check out code into the Go module directory
84-
uses: actions/checkout@v4
84+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8585
- name: golangci-lint (All-In-One config)
8686
uses: ./
8787
with:
@@ -95,7 +95,7 @@ jobs:
9595
runs-on: ubuntu-latest
9696
steps:
9797
- name: Check out code into the Go module directory
98-
uses: actions/checkout@v4
98+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9999
- name: govet
100100
uses: ./
101101
with:
@@ -108,7 +108,7 @@ jobs:
108108
runs-on: ubuntu-latest
109109
steps:
110110
- name: Check out code into the Go module directory
111-
uses: actions/checkout@v4
111+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
112112
- name: staticcheck
113113
uses: ./
114114
with:
@@ -121,7 +121,7 @@ jobs:
121121
runs-on: ubuntu-latest
122122
steps:
123123
- name: Check out code into the Go module directory
124-
uses: actions/checkout@v4
124+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
125125
- name: golint
126126
uses: ./
127127
with:
@@ -135,7 +135,7 @@ jobs:
135135
runs-on: ubuntu-latest
136136
steps:
137137
- name: Check out code into the Go module directory
138-
uses: actions/checkout@v4
138+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
139139
- name: errcheck
140140
uses: ./
141141
with:
@@ -149,7 +149,7 @@ jobs:
149149
runs-on: ubuntu-latest
150150
steps:
151151
- name: Check out code into the Go module directory
152-
uses: actions/checkout@v4
152+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
153153
- name: misspell
154154
uses: ./
155155
with:
@@ -161,20 +161,20 @@ jobs:
161161
actionlint:
162162
runs-on: ubuntu-latest
163163
steps:
164-
- uses: actions/checkout@v4
165-
- uses: reviewdog/action-actionlint@v1
164+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
165+
- uses: reviewdog/action-actionlint@e0d05810221e05b96002972e026a262f4d42ce57 # v1.65.1
166166

167167
eslint:
168168
runs-on: ubuntu-latest
169169
steps:
170-
- uses: actions/checkout@v4
170+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
171171

172-
- uses: actions/setup-node@v4
172+
- uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
173173
with:
174174
node-version-file: "package.json"
175175
cache: "npm"
176176
- run: npm ci
177-
- uses: reviewdog/action-eslint@v1
177+
- uses: reviewdog/action-eslint@9b5b0150e399e1f007ee3c27bc156549810a64e3 # v1.33.0
178178
with:
179179
reporter: github-pr-review
180180
level: warning

‎.github/workflows/test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ jobs:
1414
runs-on: ${{ matrix.platform }}
1515
steps:
1616
- name: Check out code into the Go module directory
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1818
- name: Set up Node.js
19-
uses: actions/setup-node@v4
19+
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
2020
with:
2121
node-version-file: "package.json"
2222
cache: npm

0 commit comments

Comments
 (0)