Skip to content

Commit 864a07c

Browse files
damientobin1damientobin1
committed
CCM-14499: Pinning all GitHub Actions to SHAs
1 parent cfadb7e commit 864a07c

17 files changed

Lines changed: 150 additions & 75 deletions

File tree

‎.github/actions/acceptance-tests/action.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,8 @@ runs:
2424

2525
steps:
2626
- name: Fetch terraform output
27-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with:
27+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
28+
with:
2829
name: terraform-output-${{ inputs.targetComponent }}
2930

3031
- name: Get Node version

‎.github/actions/build-docs/action.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,8 @@ runs:
2929
working-directory: "./docs"
3030
- name: Setup Pages
3131
id: pages
32-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5 - name: Build with Jekyll
32+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
33+
- name: Build with Jekyll
3334
working-directory: ./docs
3435
# Outputs to the './_site' directory by default
3536
shell: bash
@@ -40,6 +41,7 @@ runs:
4041

4142
- name: Upload artifact
4243
# Automatically uploads an artifact from the './_site' directory by default
43-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3 with:
44+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
45+
with:
4446
path: "docs/_site/"
4547
name: jekyll-docs-${{ inputs.version }}

‎.github/actions/build-libraries/action.yml‎

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,25 +30,29 @@ runs:
3030
make build VERSION="${{ inputs.version }}"
3131
3232
- name: Upload abstractions artifact
33-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
33+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
34+
with:
3435
path: "src/server/abstractions/bin/Release"
3536
name: libs-abstractions-${{ inputs.version }}
3637
include-hidden-files: true
3738

3839
- name: Upload data artifact
39-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
40+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
41+
with:
4042
path: "src/server/data/bin/Release"
4143
name: libs-data-${{ inputs.version }}
4244
include-hidden-files: true
4345

4446
- name: Upload letter artifact
45-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
47+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
48+
with:
4649
path: "src/server/letter/bin/Release"
4750
name: libs-letter-${{ inputs.version }}
4851
include-hidden-files: true
4952

5053
- name: Upload host artifact
51-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
54+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
55+
with:
5256
path: "src/server/host/bin/Release"
5357
name: libs-host-${{ inputs.version }}
5458
include-hidden-files: true
@@ -59,7 +63,8 @@ runs:
5963
shell: bash
6064

6165
- name: Build and export
62-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6 with:
66+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
67+
with:
6368
context: src/server
6469
file: src/server/Dockerfile
6570
tags: |
@@ -68,6 +73,7 @@ runs:
6873
outputs: type=docker,dest=${{ runner.temp }}/myimage/myimage.tar
6974

7075
- name: Upload artifact
71-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
76+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
77+
with:
7278
name: libs-host-docker-${{ inputs.version }}
7379
path: ${{ runner.temp }}/myimage

‎.github/actions/build-oas-spec/action.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ runs:
3030
registry-url: 'https://npm.pkg.github.com'
3131

3232
- name: "Cache node_modules"
33-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with:
33+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
34+
with:
3435
path: |
3536
**/node_modules
3637
key: ${{ runner.os }}-node-${{ inputs.nodejs_version }}-${{ hashFiles('**/package-lock.json') }}
@@ -66,6 +67,7 @@ runs:
6667
fi
6768
6869
- name: Upload API OAS specification artifact
69-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
70+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
71+
with:
7072
path: "build"
7173
name: api-oas-specification-${{ inputs.apimEnv }}${{ inputs.version != '' && format('-{0}', inputs.version) || '' }}

‎.github/actions/build-proxies/action.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,8 @@ runs:
3636
steps:
3737
- name: Download OAS Spec artifact from workflow
3838
if: ${{ inputs.isRelease == 'false' }}
39-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with:
39+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
40+
with:
4041
name: api-oas-specification-${{ inputs.apimEnv }}${{ inputs.version != '' && format('-{0}', inputs.version) || '' }}
4142
path: ./build
4243

@@ -95,7 +96,8 @@ runs:
9596
echo "APIM_ENV=$APIM_ENV" >> $GITHUB_ENV
9697
9798
- name: Upload OAS Spec
98-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
99+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
100+
with:
99101
name: ${{ env.APIM_ENV }}-build-output
100102
path: ./build
101103

‎.github/actions/build-sdk/action.yml‎

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -55,36 +55,43 @@ runs:
5555
make build VERSION="${{ inputs.version }}"
5656
5757
- name: Upload html artifact
58-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
58+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
59+
with:
5960
path: "sdk/html"
6061
name: sdk-html-${{ inputs.version }}
6162

6263
- name: Upload swagger artifact
63-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
64+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
65+
with:
6466
path: "sdk/swagger"
6567
name: sdk-swagger-${{ inputs.version }}
6668

6769
- name: Upload ts artifact
68-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
70+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
71+
with:
6972
path: "sdk/typescript"
7073
name: sdk-ts-${{ inputs.version }}
7174

7275
- name: Upload python artifact
73-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
76+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
77+
with:
7478
path: "sdk/python"
7579
name: sdk-python-${{ inputs.version }}
7680

7781
- name: Upload csharp artifact
78-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
82+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
83+
with:
7984
path: "sdk/csharp"
8085
name: sdk-csharp-${{ inputs.version }}
8186

8287
- name: Upload artifact
83-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3 with:
88+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
89+
with:
8490
path: "sdk/html/"
8591
name: sdk-html-docs-${{ inputs.version }}
8692

8793
- name: Upload swagger pages artifact
88-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3 with:
94+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
95+
with:
8996
path: "sdk/swagger/"
9097
name: sdk-swagger-docs-${{ inputs.version }}

‎.github/actions/build-server/action.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,11 +35,13 @@ runs:
3535
make build VERSION="${{ inputs.version }}"
3636
3737
- name: Upload csharp-server artifact
38-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
38+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
39+
with:
3940
path: "server/csharp-server"
4041
name: server-csharp-${{ inputs.version }}
4142

4243
- name: Upload csharp-server docker artifact
43-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with:
44+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
45+
with:
4446
path: "server/Dockerfile"
4547
name: server-csharp-docker-${{ inputs.version }}

‎.github/actions/node-install/action.yaml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,8 @@ runs:
1010
using: 'composite'
1111
steps:
1212
- name: 'Use Node.js'
13-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with:
13+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
14+
with:
1415
node-version-file: '.tool-versions'
1516
registry-url: 'https://npm.pkg.github.com'
1617
scope: '@nhsdigital'

‎.github/workflows/cicd-1-pull-request.yaml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,8 @@ jobs:
3333
deploy_proxy: ${{ steps.deploy_proxy.outputs.deploy_proxy }}
3434
steps:
3535
- name: "Checkout code"
36-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 - name: "Set CI/CD variables"
36+
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
37+
- name: "Set CI/CD variables"
3738
id: variables
3839
run: |
3940
datetime=$(date -u +'%Y-%m-%dT%H:%M:%S%z')

‎.github/workflows/cicd-3-deploy.yaml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,8 @@ jobs:
3737
# tag: ${{ steps.variables.outputs.tag }}
3838
steps:
3939
- name: "Checkout code"
40-
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 - name: "Set CI/CD variables"
40+
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
41+
- name: "Set CI/CD variables"
4142
id: variables
4243
run: |
4344
datetime=$(date -u +'%Y-%m-%dT%H:%M:%S%z')
@@ -108,5 +109,6 @@ jobs:
108109

109110
- name: Deploy to GitHub Pages
110111
id: deployment
111-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4 with:
112+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
113+
with:
112114
artifact_name: jekyll-docs-${{steps.get-asset-version.outputs.release_version}}

0 commit comments

Comments
 (0)