diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 1e4c3713..20be6f6a 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -10,7 +10,7 @@ jobs: name: ci runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.1.3 - uses: actions/setup-go@v5 with: go-version: '1.22' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d907b3be..9153d285 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,7 +19,7 @@ jobs: security-events: write steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 - name: setupGo uses: actions/setup-go@v5 with: diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index de4f4ab0..f10d801d 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -24,7 +24,7 @@ jobs: go-version: 1.22.0 id: go - name: Check out code into the Go module directory - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # tag=v3.3.0 + uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # tag=v4.1.3 - name: Update generated code run: make generate - uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # tag=v9.1.4 diff --git a/.github/workflows/e2e-long-test.yaml b/.github/workflows/e2e-long-test.yaml index f814c0eb..80c086c4 100644 --- a/.github/workflows/e2e-long-test.yaml +++ b/.github/workflows/e2e-long-test.yaml @@ -35,7 +35,7 @@ jobs: runs-on: [self-hosted, linux] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo @@ -68,7 +68,7 @@ jobs: needs: e2e_import_gitops steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo @@ -101,7 +101,7 @@ jobs: needs: e2e_v2prov steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo @@ -134,7 +134,7 @@ jobs: needs: e2e_update_labels steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo diff --git a/.github/workflows/e2e-short-test.yaml b/.github/workflows/e2e-short-test.yaml index d414e27e..79ab9b1a 100644 --- a/.github/workflows/e2e-short-test.yaml +++ b/.github/workflows/e2e-short-test.yaml @@ -8,7 +8,7 @@ jobs: runs-on: [self-hosted, linux] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo diff --git a/.github/workflows/e2e-short.yaml b/.github/workflows/e2e-short.yaml index 9046e230..e1d168e0 100644 --- a/.github/workflows/e2e-short.yaml +++ b/.github/workflows/e2e-short.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 1c464b84..ce390c5d 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -16,7 +16,7 @@ jobs: working-directory: - "" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.1.3 - uses: actions/setup-go@v5 with: go-version: '=1.22.0' diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 1f7ccf5d..0f0e97d7 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -12,7 +12,7 @@ jobs: name: lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.1.3 - uses: actions/setup-go@v5 with: go-version: 1.22.0 diff --git a/.github/workflows/nightly-chart-and-image-publish.yaml b/.github/workflows/nightly-chart-and-image-publish.yaml index 5c7f056d..e9c1d422 100644 --- a/.github/workflows/nightly-chart-and-image-publish.yaml +++ b/.github/workflows/nightly-chart-and-image-publish.yaml @@ -18,7 +18,7 @@ jobs: packages: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: ref: ${{ github.ref }} - name: Install Helm diff --git a/.github/workflows/nightly-test-release.yaml b/.github/workflows/nightly-test-release.yaml index 02c3345f..c53aa628 100644 --- a/.github/workflows/nightly-test-release.yaml +++ b/.github/workflows/nightly-test-release.yaml @@ -15,7 +15,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.1.3 with: ref: main fetch-depth: 0 @@ -77,7 +77,7 @@ jobs: secret_registry: false steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: ref: ${{ env.RELEASE_TAG }} fetch-depth: 0 @@ -100,7 +100,7 @@ jobs: RELEASE_DIR: .cr-release-packages steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: ref: ${{ env.RELEASE_TAG }} fetch-depth: 0 @@ -152,7 +152,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - uses: dev-drprasad/delete-tag-and-release@v1.1 diff --git a/.github/workflows/pr-md-link-check.yaml b/.github/workflows/pr-md-link-check.yaml index 9e1168eb..e5a3f5b3 100644 --- a/.github/workflows/pr-md-link-check.yaml +++ b/.github/workflows/pr-md-link-check.yaml @@ -14,7 +14,7 @@ jobs: name: Broken Links runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 # tag=v3.6.0 + - uses: actions/checkout@v4.1.3 # tag=v3.6.0 - uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # tag=v1 with: use-quiet-mode: 'yes' diff --git a/.github/workflows/release-workflow.yml b/.github/workflows/release-workflow.yml index 6782ae74..d90284cf 100644 --- a/.github/workflows/release-workflow.yml +++ b/.github/workflows/release-workflow.yml @@ -54,7 +54,7 @@ jobs: image: ${{ steps.image.outputs.image }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 ref: ${{ inputs.tag }} @@ -78,7 +78,7 @@ jobs: packages: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 ref: ${{ inputs.tag }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 07c51166..e12a41bb 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -68,7 +68,7 @@ jobs: secret_registry: true steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: Docker login @@ -93,7 +93,7 @@ jobs: CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo diff --git a/.github/workflows/run-e2e-suite.yaml b/.github/workflows/run-e2e-suite.yaml index 441294ee..f6ffc187 100644 --- a/.github/workflows/run-e2e-suite.yaml +++ b/.github/workflows/run-e2e-suite.yaml @@ -66,7 +66,7 @@ jobs: aws-iam-authenticator version - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 - name: setupGo diff --git a/.github/workflows/test_chart.yaml b/.github/workflows/test_chart.yaml index be82ca77..6dbe6dc8 100644 --- a/.github/workflows/test_chart.yaml +++ b/.github/workflows/test_chart.yaml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 with: fetch-depth: 0 diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 08ee2ea6..fe542437 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -21,7 +21,7 @@ jobs: runs-on: "ubuntu-20.04" steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v4.1.3 - name: Build an image run: | TAG=${{ github.sha }} ARCH=amd64 make docker-build diff --git a/.github/workflows/weekly-md-link-check.yaml b/.github/workflows/weekly-md-link-check.yaml index 497148bf..2e9a522c 100644 --- a/.github/workflows/weekly-md-link-check.yaml +++ b/.github/workflows/weekly-md-link-check.yaml @@ -17,7 +17,7 @@ jobs: branch: [ main ] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 # tag=v3.6.0 + - uses: actions/checkout@v4.1.3 # tag=v3.6.0 with: ref: ${{ matrix.branch }} - uses: gaurav-nelson/github-action-markdown-link-check@5c5dfc0ac2e225883c0e5f03a85311ec2830d368 # tag=v1