Update and pin/exclude versions of various github actions

nais · Aug 5, 2024 · fb1cc35 · fb1cc35
1 parent 8c3b427
commit fb1cc35
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -21,7 +21,7 @@ jobs:
     name: Version
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # ratchet:actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # ratchet:actions/checkout@v4
       - name: Generate image environment variable
         id: set-image-tag
         run: |
@@ -47,11 +47,11 @@ jobs:
         with:
           cosign-release: 'v2.2.1'
       - name: Checkout
-        uses: actions/checkout@v4 # ratchet:actions/checkout@v3
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # ratchet:actions/checkout@v4
       - id: "auth"
         name: "Authenticate to Google Cloud"
         if: github.ref == 'refs/heads/main'
-        uses: "google-github-actions/auth@v2.1.3" # ratchet:google-github-actions/auth@v1.0.0
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa" # ratchet:google-github-actions/auth@v2.1.3
         with:
           workload_identity_provider: ${{ secrets.NAIS_IO_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: "gh-aiven-poke@nais-io.iam.gserviceaccount.com"
@@ -88,7 +88,7 @@ jobs:
         run: cosign sign --yes ${{ steps.imgdigest.outputs.digest }}
       - name: "Setup Python, Poetry and Dependencies"
         if: github.ref == 'refs/heads/main'
-        uses: packetcoders/action-setup-cache-python-poetry@main
+        uses: packetcoders/action-setup-cache-python-poetry@0d0be5577b30d85f3fa2d93a4beeda149520f120 # ratchet:packetcoders/action-setup-cache-python-poetry@v1.2.0
         with:
           python-version: 3.12
           poetry-version: 1.5.1
@@ -110,7 +110,7 @@ jobs:
     needs:
       - version
     steps:
-      - uses: actions/checkout@v4 # ratchet:actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # ratchet:actions/checkout@v4
       - id: 'auth'
         if: github.ref == 'refs/heads/main'
         name: 'Authenticate to Google Cloud'
@@ -158,7 +158,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: nais/fasit-deploy@badff0705af8a57bcf0ab172895273da09ae5959 # ratchet:nais/fasit-deploy@v2
+      - uses: nais/fasit-deploy@v2 # ratchet:exclude
         with:
           chart: oci://${{ env.GOOGLE_REGISTRY }}/nais-io/nais/feature/${{ env.FEATURE }}
           version: ${{ needs.version.outputs.version }}