Pin dependencies

hivemq · Feb 3, 2024 · 50455bb · 50455bb
1 parent 507c817
commit 50455bb
Show file tree

Hide file tree

Showing 5 changed files with 38 additions and 38 deletions.
diff --git a/.github/workflows/hivemq-operator-integration-test.yml b/.github/workflows/hivemq-operator-integration-test.yml
@@ -19,18 +19,18 @@ jobs:
       matrix:
         test-plan: [ K8sVersionCompatibility, Extensions, RollingUpgrades, Other ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           path: helm-charts
       - name: Set up Docker QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
       - name: Login to Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Checkout HiveMQ Operator (legacy) on the default branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: hivemq/hivemq-operator
           token: ${{ secrets.JENKINS_TOKEN }}
@@ -46,12 +46,12 @@ jobs:
             git checkout origin/${GITHUB_REF_NAME}
           fi
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Run HiveMQ Operator (legacy) integration tests
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         env:
           TEST_PLAN: ${{ matrix.test-plan }}
         with:
@@ -66,7 +66,7 @@ jobs:
             :tests-hivemq-operator:integrationTest
       - name: Upload HiveMQ Operator (legacy) test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: Test results HiveMQ Operator (legacy) ${{ matrix.test-plan }}
           path: |

diff --git a/.github/workflows/hivemq-platform-operator-integration-test.yml b/.github/workflows/hivemq-platform-operator-integration-test.yml
@@ -20,18 +20,18 @@ jobs:
         test-plan: [ Upgrade, Extensions, NonRootUser, Other ]
     steps:
       - name: Checkout HiveMQ Platform Helm Charts
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           path: helm-charts
       - name: Set up Docker QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
       - name: Login to Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Checkout HiveMQ Platform Operator on the default branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: hivemq/hivemq-platform-operator
           token: ${{ secrets.JENKINS_TOKEN }}
@@ -47,12 +47,12 @@ jobs:
             git checkout origin/${GITHUB_REF_NAME}
           fi
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Run HiveMQ Platform Operator integration tests
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         env:
           TEST_PLAN: ${{ matrix.test-plan }}
         with:
@@ -67,7 +67,7 @@ jobs:
             :tests-hivemq-platform-operator:integrationTest --tests "*.compose.*"
       - name: Upload HiveMQ Platform Operator test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: Test results HiveMQ Platform Operator - Compose ${{ matrix.test-plan }}
           path: |
@@ -86,18 +86,18 @@ jobs:
       matrix:
         test-plan: [ CustomConfig, Services1, Services2, Platform, NonRootUser, Other ]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           path: helm-charts
       - name: Set up Docker QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
       - name: Login to Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Checkout HiveMQ Platform Operator on the default branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: hivemq/hivemq-platform-operator
           token: ${{ secrets.JENKINS_TOKEN }}
@@ -113,12 +113,12 @@ jobs:
             git checkout origin/${GITHUB_REF_NAME}
           fi
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Run HiveMQ Platform Operator integration tests
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         env:
           TEST_PLAN: ${{ matrix.test-plan }}
         with:
@@ -133,7 +133,7 @@ jobs:
             :tests-hivemq-platform-operator:integrationTest --tests "*.single.*"
       - name: Upload HiveMQ Platform Operator test results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: Test results HiveMQ Platform Operator - Single ${{ matrix.test-plan }}
           path: |

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Fetch history
         run: git fetch --prune --unshallow
@@ -22,7 +22,7 @@ jobs:
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
 
       - name: Set up Helm
-        uses: azure/setup-helm@v3.5
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
         with:
           version: v3.12.0
 
@@ -31,7 +31,7 @@ jobs:
           helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.6.0
+        uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           CR_SKIP_EXISTING: true

diff --git a/.github/workflows/smoke-test.yml b/.github/workflows/smoke-test.yml
@@ -24,18 +24,18 @@ jobs:
           curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl && chmod +x kubectl && sudo mv kubectl /usr/local/bin/
           curl -Lo kind https://github.com/kubernetes-sigs/kind/releases/download/v0.18.0/kind-linux-amd64 && chmod +x kind && sudo mv kind /usr/local/bin/
       - name: Set up Docker QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
       - name: Login to Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Checkout HiveMQ Helm Charts
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           path: helm-charts
       - name: Checkout HiveMQ Platform Operator on the default branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: hivemq/hivemq-platform-operator
           token: ${{ secrets.JENKINS_TOKEN }}
@@ -51,7 +51,7 @@ jobs:
             git checkout origin/${GITHUB_REF_NAME}
           fi
       - name: Build HiveMQ Platform Operator and HiveMQ Platform Operator Init images
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         with:
           cache-disabled: true
           gradle-home-cache-includes: |
@@ -90,7 +90,7 @@ jobs:
           kubectl logs -l app.kubernetes.io/instance=$RELEASE_NAME --tail -1 -n test > ${{ runner.temp }}/logs/platform-pod.log
       - name: Upload HiveMQ Platform Pods logs on failure
         if: failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: Pod logs
           path: ${{ runner.temp }}/logs/*.log
@@ -116,18 +116,18 @@ jobs:
           curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl && chmod +x kubectl && sudo mv kubectl /usr/local/bin/
           curl -Lo kind https://github.com/kubernetes-sigs/kind/releases/download/v0.18.0/kind-linux-amd64 && chmod +x kind && sudo mv kind /usr/local/bin/
       - name: Set up Docker QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
       - name: Login to Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Checkout HiveMQ Helm Charts
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           path: helm-charts
       - name: Checkout HiveMQ Operator (legacy) on the default branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           repository: hivemq/hivemq-operator
           token: ${{ secrets.JENKINS_TOKEN }}
@@ -143,7 +143,7 @@ jobs:
             git checkout origin/${GITHUB_REF_NAME}
           fi
       - name: Build HiveMQ Operator (legacy) images
-        uses: gradle/gradle-build-action@v2
+        uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # v2
         with:
           cache-disabled: true
           gradle-home-cache-includes: |
@@ -182,7 +182,7 @@ jobs:
           kubectl logs -l app.kubernetes.io/instance=$RELEASE_NAME --tail -1 -n test > ${{ runner.temp }}/logs/platform-pod.log
       - name: Upload HiveMQ Operator (legacy) Pods logs on failure
         if: failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: Pod logs
           path: ${{ runner.temp }}/logs/*.log

diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
@@ -8,8 +8,8 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: azure/setup-helm@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
           # only needed if the version is 'latest'
           token: ${{ secrets.GITHUB_TOKEN }}