diff options
| author | Patrick Linnane <patrick@linnane.io> | 2025-04-07 21:45:06 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-04-08 00:45:06 -0400 |
| commit | 16145049223cfb68c7a98bfc2cf0ef56f7e28ff5 (patch) | |
| tree | 74025957e0d511ed971bfae24eb87cf2a7e5ad41 /.github/workflows/docker.yml | |
| parent | 2324395ae2dcdb4729f9c29e393a6a03a6e84af6 (diff) | |
| download | anubis-16145049223cfb68c7a98bfc2cf0ef56f7e28ff5.tar.xz anubis-16145049223cfb68c7a98bfc2cf0ef56f7e28ff5.zip | |
workflows: hash pin Actions (#203)
Signed-off-by: Patrick Linnane <patrick@linnane.io>
Diffstat (limited to '.github/workflows/docker.yml')
| -rw-r--r-- | .github/workflows/docker.yml | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index d094453..f1f0342 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-tags: true fetch-depth: 0 @@ -31,7 +31,7 @@ jobs: uses: Homebrew/actions/setup-homebrew@master - name: Setup Homebrew cellar cache - uses: actions/cache@v4 + uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 with: path: | /home/linuxbrew/.linuxbrew/Cellar @@ -52,7 +52,7 @@ jobs: brew bundle - name: Log into registry - uses: docker/login-action@v3 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: registry: ghcr.io username: techarohq @@ -60,7 +60,7 @@ jobs: - name: Docker meta id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0 with: images: ghcr.io/techarohq/anubis @@ -74,8 +74,8 @@ jobs: SLOG_LEVEL: debug - name: Generate artifact attestation - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 with: subject-name: ghcr.io/techarohq/anubis subject-digest: ${{ steps.build.outputs.digest }} - push-to-registry: true
\ No newline at end of file + push-to-registry: true |