From 541c142a82c20688c147b6f267f9300366c3ad5b Mon Sep 17 00:00:00 2001 From: Brett Logan Date: Thu, 26 Dec 2024 09:56:53 -0500 Subject: [PATCH] Pin non-immutable Actions in create-release Signed-off-by: Brett Logan --- .github/workflows/create-release.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml index 55421620..169211e9 100644 --- a/.github/workflows/create-release.yml +++ b/.github/workflows/create-release.yml @@ -24,15 +24,15 @@ jobs: cache: "npm" - run: npm install - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 - name: Log in to the Container registry - uses: docker/login-action@v3 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Build Docker Image Locally - uses: docker/build-push-action@master + uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 with: context: . file: ./Dockerfile @@ -50,12 +50,12 @@ jobs: curl http://localhost:3000 - name: Tag a final release id: finalrelease - uses: actionsdesk/semver@0.6.0-rc.10 + uses: actionsdesk/semver@82aa4310e4e21c59cd0020007a4278e733e81dcb with: bump: final - name: Push Docker Image if: ${{ success() }} - uses: docker/build-push-action@master + uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 with: context: . file: ./Dockerfile