@@ -90,26 +90,26 @@ jobs:
9090 ecr_repo_secret : ECR_REALTIME
9191 steps :
9292 - name : Checkout code
93- uses : actions/checkout@v4
93+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
9494
9595 - name : Configure AWS credentials
96- uses : aws-actions/configure-aws-credentials@v6
96+ uses : aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6
9797 with :
9898 role-to-assume : ${{ secrets.DEV_AWS_ROLE_TO_ASSUME }}
9999 aws-region : ${{ secrets.DEV_AWS_REGION }}
100100
101101 - name : Login to Amazon ECR
102102 id : login-ecr
103- uses : aws-actions/amazon-ecr-login@v2
103+ uses : aws-actions/amazon-ecr-login@d539f0932e70871a027e9d5a9d8fc38589180a64 # v2
104104
105105 - name : Login to Docker Hub
106- uses : docker/login-action@v4
106+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
107107 with :
108108 username : ${{ secrets.DOCKERHUB_USERNAME }}
109109 password : ${{ secrets.DOCKERHUB_TOKEN }}
110110
111111 - name : Set up Docker Buildx
112- uses : useblacksmith/setup-docker-builder@v1
112+ uses : useblacksmith/setup-docker-builder@ab5c1da94f53f5cd75c1038092aa276dddfccbba # v1
113113
114114 - name : Resolve ECR repo name
115115 id : ecr-repo
@@ -118,7 +118,7 @@ jobs:
118118 ECR_REPO : ${{ matrix.ecr_repo_secret == 'ECR_APP' && secrets.ECR_APP || matrix.ecr_repo_secret == 'ECR_MIGRATIONS' && secrets.ECR_MIGRATIONS || matrix.ecr_repo_secret == 'ECR_REALTIME' && secrets.ECR_REALTIME || '' }}
119119
120120 - name : Build and push
121- uses : useblacksmith/build-push-action@v2
121+ uses : useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2
122122 with :
123123 context : .
124124 file : ${{ matrix.dockerfile }}
@@ -155,34 +155,34 @@ jobs:
155155 ecr_repo_secret : ECR_REALTIME
156156 steps :
157157 - name : Checkout code
158- uses : actions/checkout@v6
158+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
159159
160160 - name : Configure AWS credentials
161- uses : aws-actions/configure-aws-credentials@v6
161+ uses : aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6
162162 with :
163163 role-to-assume : ${{ github.ref == 'refs/heads/main' && secrets.AWS_ROLE_TO_ASSUME || secrets.STAGING_AWS_ROLE_TO_ASSUME }}
164164 aws-region : ${{ github.ref == 'refs/heads/main' && secrets.AWS_REGION || secrets.STAGING_AWS_REGION }}
165165
166166 - name : Login to Amazon ECR
167167 id : login-ecr
168- uses : aws-actions/amazon-ecr-login@v2
168+ uses : aws-actions/amazon-ecr-login@d539f0932e70871a027e9d5a9d8fc38589180a64 # v2
169169
170170 - name : Login to Docker Hub
171- uses : docker/login-action@v4
171+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
172172 with :
173173 username : ${{ secrets.DOCKERHUB_USERNAME }}
174174 password : ${{ secrets.DOCKERHUB_TOKEN }}
175175
176176 - name : Login to GHCR
177177 if : github.ref == 'refs/heads/main'
178- uses : docker/login-action@v4
178+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
179179 with :
180180 registry : ghcr.io
181181 username : ${{ github.repository_owner }}
182182 password : ${{ secrets.GITHUB_TOKEN }}
183183
184184 - name : Set up Docker Buildx
185- uses : useblacksmith/setup-docker-builder@v1
185+ uses : useblacksmith/setup-docker-builder@ab5c1da94f53f5cd75c1038092aa276dddfccbba # v1
186186
187187 - name : Resolve ECR repo name
188188 id : ecr-repo
@@ -222,7 +222,7 @@ jobs:
222222 echo "tags=${TAGS}" >> $GITHUB_OUTPUT
223223
224224 - name : Build and push images
225- uses : useblacksmith/build-push-action@v2
225+ uses : useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2
226226 with :
227227 context : .
228228 file : ${{ matrix.dockerfile }}
@@ -254,17 +254,17 @@ jobs:
254254
255255 steps :
256256 - name : Checkout code
257- uses : actions/checkout@v6
257+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
258258
259259 - name : Login to GHCR
260- uses : docker/login-action@v4
260+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
261261 with :
262262 registry : ghcr.io
263263 username : ${{ github.repository_owner }}
264264 password : ${{ secrets.GITHUB_TOKEN }}
265265
266266 - name : Set up Docker Buildx
267- uses : useblacksmith/setup-docker-builder@v1
267+ uses : useblacksmith/setup-docker-builder@ab5c1da94f53f5cd75c1038092aa276dddfccbba # v1
268268
269269 - name : Generate ARM64 tags
270270 id : meta
@@ -282,7 +282,7 @@ jobs:
282282 echo "tags=${TAGS}" >> $GITHUB_OUTPUT
283283
284284 - name : Build and push ARM64 to GHCR
285- uses : useblacksmith/build-push-action@v2
285+ uses : useblacksmith/build-push-action@fb9e3e6a9299c78462bfadd0d93352c316adc9b8 # v2
286286 with :
287287 context : .
288288 file : ${{ matrix.dockerfile }}
@@ -309,7 +309,7 @@ jobs:
309309
310310 steps :
311311 - name : Login to GHCR
312- uses : docker/login-action@v4
312+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
313313 with :
314314 registry : ghcr.io
315315 username : ${{ github.repository_owner }}
@@ -349,10 +349,10 @@ jobs:
349349 outputs :
350350 docs_changed : ${{ steps.filter.outputs.docs }}
351351 steps :
352- - uses : actions/checkout@v6
352+ - uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
353353 with :
354354 fetch-depth : 2 # Need at least 2 commits to detect changes
355- - uses : dorny/paths-filter@v4
355+ - uses : dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4
356356 id : filter
357357 with :
358358 filters : |
@@ -379,14 +379,14 @@ jobs:
379379 contents : write
380380 steps :
381381 - name : Checkout code
382- uses : actions/checkout@v6
382+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
383383 with :
384384 fetch-depth : 0
385385
386386 - name : Setup Bun
387- uses : oven-sh/setup-bun@v2
387+ uses : oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
388388 with :
389- bun-version : latest
389+ bun-version : 1.3.13
390390
391391 - name : Install dependencies
392392 run : bun install --frozen-lockfile
0 commit comments