@@ -22,18 +22,18 @@ jobs:
2222 - form
2323 - canvas
2424 steps :
25- - uses : actions/checkout@v6
25+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2626 - id : version
2727 run : |
2828 echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
2929 echo "latestTag=$([[ ${GITHUB_REF#refs/tags/v} =~ [a-zA-Z] ]] && echo prerelease || echo latest)" >> $GITHUB_OUTPUT
30- - uses : docker/setup-buildx-action@v3
31- - uses : docker/login-action@v3
30+ - uses : docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
31+ - uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
3232 with :
3333 registry : ghcr.io
3434 username : ${{ github.actor }}
3535 password : ${{ secrets.GITHUB_TOKEN }}
36- - uses : docker/build-push-action@v6
36+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
3737 with :
3838 context : .
3939 file : ./agents/${{ matrix.agent }}/Dockerfile
5858 docker kill tmp-agent
5959 AGENT_MANIFEST=$(echo "$response" | base64 -w 0)
6060 echo "content=$AGENT_MANIFEST" >> $GITHUB_OUTPUT
61- - uses : docker/build-push-action@v6
61+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
6262 with :
6363 context : .
6464 file : ./agents/${{ matrix.agent }}/Dockerfile
8383 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
8484 HELM_EXPERIMENTAL_OCI : " 1"
8585 steps :
86- - uses : actions/checkout@v6
86+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
8787 - id : version
8888 run : |
8989 echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
@@ -110,16 +110,16 @@ jobs:
110110 # `sudo usermod -aG kvm $(whoami)` does not take an effect on GHA
111111 sudo chown $(whoami) /dev/kvm
112112 - run : mise run common:check:version
113- - uses : docker/setup-qemu-action@v3
114- - uses : docker/setup-buildx-action@v3
115- - uses : docker/login-action@v3
113+ - uses : docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
114+ - uses : docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
115+ - uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
116116 with :
117117 registry : ghcr.io
118118 username : ${{ github.actor }}
119119 password : ${{ secrets.GITHUB_TOKEN }}
120120
121121 - run : mise run 'agentstack-server:build:*'
122- - uses : docker/build-push-action@v6
122+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
123123 with :
124124 context : ./apps/agentstack-server
125125 push : true
@@ -131,7 +131,7 @@ jobs:
131131 cache-from : type=registry,ref=ghcr.io/${{ github.repository }}/agentstack-server:cache
132132 cache-to : type=registry,ref=ghcr.io/${{ github.repository }}/agentstack-server:cache,mode=max
133133
134- - uses : docker/build-push-action@v6
134+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
135135 with :
136136 context : ./apps/supergateway
137137 file : ./apps/supergateway/Dockerfile
@@ -146,7 +146,7 @@ jobs:
146146 run : |
147147 KEYCLOAK_VERSION=$(grep -oP 'FROM quay.io/keycloak/keycloak:\K[0-9.]+' ./apps/keycloak-theme/Dockerfile)
148148 echo "version=$KEYCLOAK_VERSION" >> $GITHUB_OUTPUT
149- - uses : docker/build-push-action@v6
149+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
150150 with :
151151 context : ./apps/keycloak-theme
152152 file : ./apps/keycloak-theme/Dockerfile
@@ -159,7 +159,7 @@ jobs:
159159 cache-to : type=registry,ref=ghcr.io/${{ github.repository }}/keycloak-themed:cache,mode=max
160160
161161 - run : mise run 'agentstack-ui:build:*'
162- - uses : docker/build-push-action@v6
162+ - uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
163163 with :
164164 context : .
165165 file : ./apps/agentstack-ui/Dockerfile
0 commit comments