@@ -47,15 +47,15 @@ jobs:
4747 run : echo "Triggered by ${{ github.event_name }}"
4848
4949 - name : Checkout code
50- uses : actions/checkout@v4.3.0
50+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5151 with :
5252 ref : ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.branch || github.head_ref }}
5353 fetch-depth : 0
5454
5555 - name : PR comment build starting
5656 if : github.event_name == 'pull_request'
5757 id : build-comment
58- uses : actions/github-script@v7
58+ uses : actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
5959 with :
6060 script : |
6161 const comment = await github.rest.issues.createComment({
@@ -67,29 +67,29 @@ jobs:
6767 core.setOutput('comment-id', comment.data.id);
6868
6969 - name : Set up QEMU
70- uses : docker/setup-qemu-action@v3.6.0
70+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
7171
7272 - name : Set up Docker Buildx
73- uses : docker/setup-buildx-action@v3.11.1
73+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
7474
7575 - name : Login to GHCR
7676 if : env.USE_GHCR == 'true'
77- uses : docker/login-action@v3.5.0
77+ uses : docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
7878 with :
7979 registry : ghcr.io
8080 username : ${{ github.repository_owner }}
8181 password : ${{ secrets.GITHUB_TOKEN }}
8282
8383 - name : Login to Docker Hub
8484 if : env.USE_DOCKERHUB == 'true'
85- uses : docker/login-action@v3.5.0
85+ uses : docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
8686 with :
8787 username : ${{ secrets.DOCKER_USERNAME }}
8888 password : ${{ secrets.DOCKER_PASSWORD }}
8989
9090 - name : Generate Docker metadata
9191 id : meta
92- uses : docker/metadata-action@v5.8.0
92+ uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
9393 with :
9494 images : |
9595 ${{ env.USE_GHCR == 'true' && format('name=ghcr.io/{0}/romm-testing', github.repository_owner) || '' }}
9999
100100 - name : Build full image
101101 id : build-full
102- uses : docker/build-push-action@v6.18.0
102+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
103103 with :
104104 file : docker/Dockerfile
105105 context : .
@@ -114,7 +114,7 @@ jobs:
114114 # PR builds always push to GHCR only, so the image link is hardcoded to GHCR.
115115 - name : Comment PR with GHCR image link
116116 if : github.event_name == 'pull_request'
117- uses : actions/github-script@v7
117+ uses : actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
118118 env :
119119 HEAD_REF : ${{ github.head_ref }}
120120 with :
0 commit comments