Pin checkout action to full SHA
This commit is contained in:
parent
73da08f8ae
commit
9693334b16
6
.github/workflows/release-traceability.yml
vendored
6
.github/workflows/release-traceability.yml
vendored
@ -14,7 +14,7 @@ jobs:
|
||||
service_image_tag: ${{ steps.meta.outputs.service_image_tag }}
|
||||
service_image_commit: ${{ steps.meta.outputs.service_image_commit }}
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: Derive image identity
|
||||
id: meta
|
||||
@ -33,7 +33,7 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
needs: build
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: Deploy via playbook
|
||||
env:
|
||||
@ -47,7 +47,7 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
needs: deploy
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||
|
||||
- name: Verify traceability script cases
|
||||
run: bash ./scripts/github-actions/test-validate-release-traceability.sh
|
||||
|
||||
Loading…
Reference in New Issue
Block a user