Pin checkout action to full SHA
This commit is contained in:
parent
73da08f8ae
commit
9693334b16
6
.github/workflows/release-traceability.yml
vendored
6
.github/workflows/release-traceability.yml
vendored
@ -14,7 +14,7 @@ jobs:
|
|||||||
service_image_tag: ${{ steps.meta.outputs.service_image_tag }}
|
service_image_tag: ${{ steps.meta.outputs.service_image_tag }}
|
||||||
service_image_commit: ${{ steps.meta.outputs.service_image_commit }}
|
service_image_commit: ${{ steps.meta.outputs.service_image_commit }}
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||||
|
|
||||||
- name: Derive image identity
|
- name: Derive image identity
|
||||||
id: meta
|
id: meta
|
||||||
@ -33,7 +33,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: build
|
needs: build
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||||
|
|
||||||
- name: Deploy via playbook
|
- name: Deploy via playbook
|
||||||
env:
|
env:
|
||||||
@ -47,7 +47,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: deploy
|
needs: deploy
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||||
|
|
||||||
- name: Verify traceability script cases
|
- name: Verify traceability script cases
|
||||||
run: bash ./scripts/github-actions/test-validate-release-traceability.sh
|
run: bash ./scripts/github-actions/test-validate-release-traceability.sh
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user