diff --git a/.github/workflows/check-size.yml b/.github/workflows/check-size.yml index 44fb5324eee..f7238dce2ac 100644 --- a/.github/workflows/check-size.yml +++ b/.github/workflows/check-size.yml @@ -16,12 +16,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: fetch-depth: 1 - name: Check large files - uses: actionsdesk/lfs-warning@v3.3 + uses: actionsdesk/lfs-warning@e5f9a4c21f4bee104db7c0f23954dde59e5df909 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f0d6f61f421..204d92adefc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,12 +20,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive - name: Install Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod @@ -44,7 +44,7 @@ jobs: sudo make test-coverage - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.txt @@ -57,23 +57,23 @@ jobs: needs: [test] steps: - name: Check out code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive - name: Setup Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod - name: Setup QEMU - uses: docker/setup-qemu-action@v3.2.0 + uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -81,7 +81,7 @@ jobs: ${{ runner.os }}-buildx- - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -91,7 +91,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -101,7 +101,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Dfdaemon Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/dfdaemon/Dockerfile diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 9ddcce1aed3..238109a4d69 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -22,15 +22,15 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Initialize CodeQL - uses: github/codeql-action/init@v3.26.2 + uses: github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@v3.26.2 + uses: github/codeql-action/autobuild@429e1977040da7a23b6822b13c129cd1ba93dbb2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3.26.2 + uses: github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2 diff --git a/.github/workflows/compatibility-e2e-v1.yml b/.github/workflows/compatibility-e2e-v1.yml index 67f497ea53a..c9697400a8c 100644 --- a/.github/workflows/compatibility-e2e-v1.yml +++ b/.github/workflows/compatibility-e2e-v1.yml @@ -56,12 +56,12 @@ jobs: swap-storage: true - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive - name: Install Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod @@ -72,13 +72,13 @@ jobs: go mod vendor - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -86,7 +86,7 @@ jobs: ${{ runner.os }}-buildx- - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -97,7 +97,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -108,7 +108,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Dfdaemon Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/dfdaemon/Dockerfile @@ -119,7 +119,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build No Content Length Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: test/tools/no-content-length/ file: test/tools/no-content-length/Dockerfile @@ -130,7 +130,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -171,14 +171,14 @@ jobs: mv /tmp/.buildx-cache-new /tmp/.buildx-cache - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.txt flags: ${{ matrix }}-compatibility-e2etests - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: ${{ matrix.module }}-compatibility-e2e-tests-logs diff --git a/.github/workflows/compatibility-e2e-v2.yml b/.github/workflows/compatibility-e2e-v2.yml index ed7b0de02c1..b920a780bf2 100644 --- a/.github/workflows/compatibility-e2e-v2.yml +++ b/.github/workflows/compatibility-e2e-v2.yml @@ -56,13 +56,13 @@ jobs: swap-storage: true - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive fetch-depth: 0 - name: Install Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod @@ -72,13 +72,13 @@ jobs: mkdir -p /tmp/artifact - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -95,7 +95,7 @@ jobs: docker tag dragonflyoss/dfinit:$CLIENT_TAG dragonflyoss/dfinit:latest - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -106,7 +106,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -117,7 +117,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -147,14 +147,14 @@ jobs: mv /tmp/.buildx-cache-new /tmp/.buildx-cache - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.txt flags: e2etests - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: ${{ matrix.module }}-e2e-tests-logs diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index e903531bc2c..8fa5f99938a 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 120 steps: - name: Check out code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive @@ -52,13 +52,13 @@ jobs: echo IMAGE_REPOSITORY=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]') >> $GITHUB_ENV - name: Setup QEMU - uses: docker/setup-qemu-action@v3.2.0 + uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -69,21 +69,21 @@ jobs: uses: sigstore/cosign-installer@v3 - name: Login Docker Hub - uses: docker/login-action@v3.3.0 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 with: registry: docker.io username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GitHub Container Registry - uses: docker/login-action@v3.3.0 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 with: registry: ghcr.io username: ${{ github.repository_owner }} password: ${{ secrets.GITHUB_TOKEN }} - name: Push to Registry - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . platforms: ${{ matrix.platforms }} diff --git a/.github/workflows/e2e-v1-nydus.yml b/.github/workflows/e2e-v1-nydus.yml index d0e56ae6ff4..d30310c164e 100644 --- a/.github/workflows/e2e-v1-nydus.yml +++ b/.github/workflows/e2e-v1-nydus.yml @@ -27,18 +27,18 @@ jobs: timeout-minutes: 60 steps: - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -46,7 +46,7 @@ jobs: ${{ runner.os }}-buildx- - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -57,7 +57,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -68,7 +68,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Dfdaemon Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/dfdaemon/Dockerfile @@ -79,7 +79,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -147,7 +147,7 @@ jobs: docker exec kind-control-plane journalctl -u kubelet >> $log_dir/kubelet.log - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: nydus-e2e-tests-logs diff --git a/.github/workflows/e2e-v1.yml b/.github/workflows/e2e-v1.yml index 9a3f73a6ee2..a95f00f1e3f 100644 --- a/.github/workflows/e2e-v1.yml +++ b/.github/workflows/e2e-v1.yml @@ -76,12 +76,12 @@ jobs: swap-storage: true - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive - name: Install Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod @@ -91,13 +91,13 @@ jobs: mkdir -p /tmp/artifact - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -105,7 +105,7 @@ jobs: ${{ runner.os }}-buildx- - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -116,7 +116,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -127,7 +127,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Dfdaemon Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/dfdaemon/Dockerfile @@ -138,7 +138,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build No Content Length Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: test/tools/no-content-length/ file: test/tools/no-content-length/Dockerfile @@ -149,7 +149,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -194,14 +194,14 @@ jobs: mv /tmp/.buildx-cache-new /tmp/.buildx-cache - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.txt flags: e2etests - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: ${{ matrix.module }}-e2e-tests-logs diff --git a/.github/workflows/e2e-v2-nydus.yml b/.github/workflows/e2e-v2-nydus.yml index 9480229dce6..f9faa41f9b4 100644 --- a/.github/workflows/e2e-v2-nydus.yml +++ b/.github/workflows/e2e-v2-nydus.yml @@ -36,19 +36,19 @@ jobs: swap-storage: true - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive fetch-depth: 0 - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -65,7 +65,7 @@ jobs: docker tag dragonflyoss/dfinit:$CLIENT_TAG dragonflyoss/dfinit:latest - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -76,7 +76,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -87,7 +87,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -167,7 +167,7 @@ jobs: done - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: nydus-e2e-tests-logs diff --git a/.github/workflows/e2e-v2.yml b/.github/workflows/e2e-v2.yml index 173ae8dcc3b..184e78f5d27 100644 --- a/.github/workflows/e2e-v2.yml +++ b/.github/workflows/e2e-v2.yml @@ -43,13 +43,13 @@ jobs: swap-storage: true - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: submodules: recursive fetch-depth: 0 - name: Install Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod @@ -59,13 +59,13 @@ jobs: mkdir -p /tmp/artifact - name: Setup buildx - uses: docker/setup-buildx-action@v3.6.1 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db id: buildx with: install: true - name: Cache Docker layers - uses: actions/cache@v4.0.2 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ github.sha }} @@ -82,7 +82,7 @@ jobs: docker tag dragonflyoss/dfinit:$CLIENT_TAG dragonflyoss/dfinit:latest - name: Build Scheduler Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/scheduler/Dockerfile @@ -93,7 +93,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Build Manager Image - uses: docker/build-push-action@v6.7.0 + uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 with: context: . file: build/images/manager/Dockerfile @@ -104,7 +104,7 @@ jobs: cache-to: type=local,dest=/tmp/.buildx-cache-new - name: Setup Kind - uses: helm/kind-action@v1.10.0 + uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde with: version: ${{ env.KIND_VERSION }} config: ${{ env.KIND_CONFIG_PATH }} @@ -134,14 +134,14 @@ jobs: mv /tmp/.buildx-cache-new /tmp/.buildx-cache - name: Upload coverage to Codecov - uses: codecov/codecov-action@v4.5.0 + uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.txt flags: e2etests - name: Upload Logs - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a if: always() with: name: ${{ matrix.module }}-e2e-tests-logs diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index d89601f006f..197cb631e33 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -19,15 +19,15 @@ jobs: timeout-minutes: 30 steps: - name: Checkout code - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - - uses: actions/setup-go@v5.0.2 + - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod cache: false - name: Golangci lint - uses: golangci/golangci-lint-action@v6.1.0 + uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 with: version: v1.54 args: --verbose diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f2a8cb69643..3fa27bdaaf0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,24 +18,24 @@ jobs: hashes: ${{ steps.hash.outputs.hashes }} steps: - name: Checkout - uses: actions/checkout@v4.1.7 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: fetch-depth: 0 submodules: recursive - name: Setup Go - uses: actions/setup-go@v5.0.2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version-file: go.mod - name: Check GoReleaser config - uses: goreleaser/goreleaser-action@v6.0.0 + uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 with: version: latest args: check - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v6.0.0 + uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 id: run-goreleaser with: distribution: goreleaser diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index cdb63dcacdb..aae147aef49 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -33,7 +33,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@v2.4.0 + uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 with: results_file: results.sarif results_format: sarif @@ -55,7 +55,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@v4.3.6 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 with: name: SARIF file path: results.sarif