CI: Pin github actions for security (#12105)

Dependabot can still upgrade the action version.
This commit is contained in:
Max Gautier
2025-04-03 15:22:38 +02:00
committed by GitHub
parent cf48915657
commit 0ae9ab36ce
3 changed files with 6 additions and 6 deletions

View File

@@ -13,16 +13,16 @@ jobs:
issues: write issues: write
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
- name: Parse issue form - name: Parse issue form
uses: stefanbuck/github-issue-parser@v3 uses: stefanbuck/github-issue-parser@2ea9b35a8c584529ed00891a8f7e41dc46d0441e
id: issue-parser id: issue-parser
with: with:
template-path: .github/ISSUE_TEMPLATE/bug-report.yaml template-path: .github/ISSUE_TEMPLATE/bug-report.yaml
- name: Set labels based on OS field - name: Set labels based on OS field
uses: redhat-plumbers-in-action/advanced-issue-labeler@v3 uses: redhat-plumbers-in-action/advanced-issue-labeler@39087a4b30cb98d57f25f34d617a6af8163c17d9
with: with:
issue-form: ${{ steps.issue-parser.outputs.jsonString }} issue-form: ${{ steps.issue-parser.outputs.jsonString }}
section: os section: os

View File

@@ -12,7 +12,7 @@ jobs:
outputs: outputs:
branches: ${{ steps.get-branches.outputs.data }} branches: ${{ steps.get-branches.outputs.data }}
steps: steps:
- uses: octokit/graphql-action@v2.3.2 - uses: octokit/graphql-action@8ad880e4d437783ea2ab17010324de1075228110
id: get-branches id: get-branches
with: with:
query: | query: |

View File

@@ -11,7 +11,7 @@ jobs:
update-patch-versions: update-patch-versions:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
with: with:
ref: ${{ inputs.branch }} ref: ${{ inputs.branch }}
- uses: actions/setup-python@v5 - uses: actions/setup-python@v5
@@ -29,7 +29,7 @@ jobs:
~/.cache/pre-commit ~/.cache/pre-commit
- run: pre-commit run --all-files propagate-ansible-variables - run: pre-commit run --all-files propagate-ansible-variables
continue-on-error: true continue-on-error: true
- uses: peter-evans/create-pull-request@v7 - uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e
with: with:
commit-message: Patch versions updates commit-message: Patch versions updates
title: Patch versions updates - ${{ inputs.branch }} title: Patch versions updates - ${{ inputs.branch }}