Skip to content

Commit 8450c29

Browse files
tashianclaude
andcommitted
Pin unpinned actions and normalize Docker image refs for frizbee
- Pin google-github-actions/auth and setup-gcloud to SHAs in goreleaser.yml - Normalize Docker image refs to index.docker.io format with digest (required by frizbee-action for proper pinning detection) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent b3a3a10 commit 8450c29

3 files changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/actionlint.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,6 @@ jobs:
99
steps:
1010
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1111
- name: Check workflow files
12-
uses: docker://rhysd/actionlint:1.7.11@sha256:6f03470d0152251d7f07f7c4dc019dbe7024c72cd952f839544c7798843efa8f
12+
uses: docker://index.docker.io/rhysd/actionlint@sha256:6f03470d0152251d7f07f7c4dc019dbe7024c72cd952f839544c7798843efa8f # 1.7.11
1313
with:
1414
args: -color

.github/workflows/goCI.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ jobs:
9090
steps:
9191
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9292
- name: Check workflow files
93-
uses: docker://rhysd/actionlint:1.7.11@sha256:6f03470d0152251d7f07f7c4dc019dbe7024c72cd952f839544c7798843efa8f
93+
uses: docker://index.docker.io/rhysd/actionlint@sha256:6f03470d0152251d7f07f7c4dc019dbe7024c72cd952f839544c7798843efa8f # 1.7.11
9494
with:
9595
args: -color
9696

.github/workflows/goreleaser.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -130,15 +130,15 @@ jobs:
130130
name: Authenticate to Google Cloud
131131
if: inputs.enable-packages-upload
132132
id: gcloud-auth
133-
uses: google-github-actions/auth@v3
133+
uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3
134134
with:
135135
token_format: access_token
136136
workload_identity_provider: ${{ secrets.GOOGLE_CLOUD_WORKLOAD_IDENTITY_PROVIDER }}
137137
service_account: ${{ secrets.GOOGLE_CLOUD_GITHUB_SERVICE_ACCOUNT }}
138138
-
139139
name: Set up Google Cloud SDK
140140
if: inputs.enable-packages-upload
141-
uses: google-github-actions/setup-gcloud@v3
141+
uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3
142142
with:
143143
project_id: ${{ secrets.GOOGLE_CLOUD_PACKAGES_PROJECT_ID }}
144144
-

0 commit comments

Comments
 (0)