ci: pin GitHub Actions workflow actions by hash (#1422)

as recommended in https://github.com/ossf/scorecard/blob/5758364c82f7fc72b256f9a8cfc89dc550d7dd66/docs/checks.md#pinned-dependencies Ref #1298
2022-05-11 19:41:30 +09:00
parent c1e5829b03
commit d01595cfbc
8 changed files with 53 additions and 30 deletions
@@ -42,7 +42,7 @@ jobs:

    steps:
      - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@d0651293c4a5a52e711f25b41b05b2212f385d28

      - name: Setup Docker Environment
        id: vars
@@ -54,7 +54,7 @@ jobs:
          ghcr_password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and Push Versioned Tags
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a
        with:
          context: ./runner
          file: ./runner/${{ matrix.dockerfile }}