Skip to content

Commit 5e63b5f

Browse files
k8s-ci-robotk8s-ci-robot
authored
Merge pull request #4713 from kubernetes-client/copilot/migrate-master-java8-sha-commits
chore: pin GitHub Actions to SHA commits on master-java8
2 parents d1bf95b + 5294464 commit 5e63b5f

7 files changed

Lines changed: 38 additions & 32 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,3 +10,9 @@ updates:
1010
schedule:
1111
interval: "daily"
1212
time: "03:00"
13+
- package-ecosystem: "github-actions"
14+
directory: "/"
15+
target-branch: "master-java8"
16+
schedule:
17+
interval: "daily"
18+
time: "03:00"

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,21 +28,21 @@ jobs:
2828

2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@v4
31+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3232
- name: Setup Java
33-
uses: actions/setup-java@v4
33+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
3434
with:
3535
distribution: 'temurin'
3636
java-version: 17.0.x
3737
# Initializes the CodeQL tools for scanning.
3838
- name: Initialize CodeQL
39-
uses: github/codeql-action/init@v2
39+
uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
4040
with:
4141
languages: ${{ matrix.language }}
4242
tools: 'https://github.com/github/codeql-action/releases/download/codeql-bundle-20230524/codeql-bundle-linux64.tar.gz'
4343

4444
- name: Autobuild
45-
uses: github/codeql-action/autobuild@v2
45+
uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
4646

4747
- name: Perform CodeQL Analysis
48-
uses: github/codeql-action/analyze@v2
48+
uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2

‎.github/workflows/generate-crd.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v4
31+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3232
- name: Run CRD Model Generation
3333
run: |
3434
read CRD_SRC_ARGS < <(echo '${{ github.event.inputs.crds }}' | perl -ne 'print join " ", map {"-u $_"} split /,/')
@@ -48,7 +48,7 @@ jobs:
4848
-p ${{ github.event.inputs.generatingJavaPackage }} \
4949
-o "$(pwd)/${GEN_DIR}"
5050
ls -lh ${GEN_DIR}
51-
- uses: actions/upload-artifact@v3
51+
- uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
5252
with:
5353
name: generated-java-crd-model
5454
path: |

‎.github/workflows/generate.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,16 +30,16 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Checkout Java
33-
uses: actions/checkout@v4
33+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3434
with:
3535
token: ${{ secrets.PAT_TOKEN }}
3636
- name: Setup Java
37-
uses: actions/setup-java@v4
37+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
3838
with:
3939
distribution: 'temurin'
4040
java-version: 17.0.x
4141
- name: Checkout Gen
42-
uses: actions/checkout@v4
42+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
4343
with:
4444
path: gen
4545
repository: kubernetes-client/gen
@@ -108,7 +108,7 @@ jobs:
108108
git push origin "$BRANCH"
109109
- name: Pull Request
110110
if: ${{ github.event.inputs.dry_run != 'true' }}
111-
uses: repo-sync/pull-request@v2
111+
uses: repo-sync/pull-request@7e79a9f5dc3ad0ce53138f01df2fad14a04831c5 # v2
112112
with:
113113
source_branch: ${{ env.BRANCH }}
114114
destination_branch: ${{ github.ref_name }}

‎.github/workflows/maven.yml‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ jobs:
1414
runs-on: ubuntu-latest
1515
name: Verify Source Format
1616
steps:
17-
- uses: actions/checkout@v4
17+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1818
- name: Setup Java
19-
uses: actions/setup-java@v4
19+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
2020
with:
2121
distribution: 'temurin'
2222
java-version: 17
@@ -31,14 +31,14 @@ jobs:
3131
os: [ windows-latest, ubuntu-latest ]
3232
runs-on: ${{ matrix.os }}
3333
steps:
34-
- uses: actions/checkout@v4
34+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3535
- name: Setup Java
36-
uses: actions/setup-java@v4
36+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
3737
with:
3838
distribution: 'temurin'
3939
java-version: ${{ matrix.java }}
4040
- name: Cache local Maven repository
41-
uses: actions/cache@v3
41+
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
4242
with:
4343
path: ~/.m2/repository
4444
key: ${{ runner.os }}-maven-${{ matrix.java }}-${{ hashFiles('pom.xml', '**/pom.xml') }}
@@ -56,8 +56,8 @@ jobs:
5656
runs-on: ubuntu-latest
5757
name: GraalVM Maven Test
5858
steps:
59-
- uses: actions/checkout@v4
60-
- uses: graalvm/setup-graalvm@v1
59+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
60+
- uses: graalvm/setup-graalvm@60c26726de13f8b90771df4bc1641a52a3159994 # v1
6161
with:
6262
version: '22.3.0'
6363
java-version: '17'
@@ -68,11 +68,11 @@ jobs:
6868
runs-on: ubuntu-latest
6969
name: End-to-End Test Against Real Cluster
7070
steps:
71-
- uses: actions/checkout@v4
71+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
7272
- name: Create k8s Kind Cluster
73-
uses: helm/kind-action@v1.8.0
73+
uses: helm/kind-action@dda0770415bac9fc20092cacbc54aa298604d140 # v1.8.0
7474
- name: Setup Java
75-
uses: actions/setup-java@v4
75+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
7676
with:
7777
distribution: 'temurin'
7878
java-version: 17.0.x
@@ -91,14 +91,14 @@ jobs:
9191
runs-on: ubuntu-latest
9292
name: Examples smoke test
9393
steps:
94-
- uses: actions/checkout@v4
94+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
9595
- name: Setup Java
96-
uses: actions/setup-java@v4
96+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
9797
with:
9898
distribution: 'temurin'
9999
java-version: 17.0.x
100100
- name: Cache local Maven repository
101-
uses: actions/cache@v3
101+
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3
102102
with:
103103
path: ~/.m2/repository
104104
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -139,9 +139,9 @@ jobs:
139139
- 5000:5000
140140
name: CRD Java Models Code Generation
141141
steps:
142-
- uses: actions/checkout@v4
142+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
143143
- name: Publish to Registry
144-
uses: elgohr/Publish-Docker-Github-Action@v5
144+
uses: elgohr/Publish-Docker-Github-Action@1c2f28ccd9476e8a936ac9a1f287405504c93304 # v5
145145
with:
146146
name: kubernetes-client/java/crd-model-gen
147147
tags: gh-action-tmp

‎.github/workflows/release.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@ jobs:
2727
echo "${{ github.event.inputs.releaseVersion }}" | perl -ne 'die unless m/^\d+\.\d+\.\d+-legacy$/'
2828
echo "${{ github.event.inputs.nextDevelopmentVersion }}" | perl -ne 'die unless m/^\d+\.\d+\.\d+-legacy-SNAPSHOT$/'
2929
- name: Checkout
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3131
with:
3232
token: ${{ secrets.PAT_TOKEN }}
3333
- name: Check Actor
3434
run: |
3535
# Release actor should be in the OWNER list
3636
cat OWNERS | grep ${{ github.actor }}
3737
- name: Setup Java
38-
uses: actions/setup-java@v4
38+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
3939
with:
4040
distribution: 'temurin'
4141
java-version: 17.0.x
@@ -87,15 +87,15 @@ jobs:
8787
git push https://${{ github.token }}@github.com/${{ github.repository }}.git v${{ github.event.inputs.releaseVersion }}
8888
- name: Pull Request
8989
if: ${{ github.event.inputs.dry-run != 'true' }}
90-
uses: repo-sync/pull-request@v2
90+
uses: repo-sync/pull-request@7e79a9f5dc3ad0ce53138f01df2fad14a04831c5 # v2
9191
with:
9292
source_branch: automated-release-${{ github.event.inputs.releaseVersion }}
9393
destination_branch: ${{ github.ref_name }}
9494
github_token: ${{ secrets.PAT_TOKEN }}
9595
pr_title: "Automated Release: ${{ github.event.inputs.releaseVersion }}"
9696
- name: Publish Release
9797
if: ${{ github.event.inputs.dry-run != 'true' }}
98-
uses: ncipollo/release-action@v1
98+
uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
9999
with:
100100
token: ${{ secrets.PAT_TOKEN }}
101101
tag: v${{ github.event.inputs.releaseVersion }}

‎.github/workflows/snapshot.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: Checkout
18-
uses: actions/checkout@v4
18+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1919
- name: Setup Java
20-
uses: actions/setup-java@v4
20+
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
2121
with:
2222
distribution: 'temurin'
2323
java-version: 17.0.x

0 commit comments

Comments
 (0)