Skip to content

Commit 2436759

Browse files
mattdean3-nhsmattdean3-nhs
authored
Merge pull request #1179 from NHSDigital/feature/made14-NRL-1922-use-commit-hashes
NRL-1922 Use commit hashes for github workflow action versions
2 parents d12acbc + c53f2a1 commit 2436759

11 files changed

Lines changed: 60 additions & 60 deletions

‎.github/workflows/activate-stack.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Git clone - ${{ github.ref }}
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3131
with:
3232
ref: ${{ github.ref }}
3333

‎.github/workflows/daily-build.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626

2727
steps:
2828
- name: Git clone - ${{ github.ref }}
29-
uses: actions/checkout@v4
29+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3030
with:
3131
ref: ${{ github.ref }}
3232

@@ -58,7 +58,7 @@ jobs:
5858
make get-s3-perms ENV=${account} TF_WORKSPACE_NAME=${inactive_stack}
5959
6060
- name: Save Build Artifacts
61-
uses: actions/upload-artifact@v4
61+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
6262
with:
6363
name: build-artifacts
6464
path: |
@@ -67,7 +67,7 @@ jobs:
6767
!dist/nrlf_permissions.zip
6868
6969
- name: Save NRLF Permissions cache
70-
uses: actions/cache/save@v4
70+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7171
with:
7272
key: ${{ github.run_id }}-nrlf-permissions
7373
path: dist/nrlf_permissions.zip
@@ -81,12 +81,12 @@ jobs:
8181
contents: read
8282
actions: write
8383
steps:
84-
- uses: actions/checkout@v4
84+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
8585
with:
8686
ref: ${{ github.ref }}
8787

8888
- name: Get build artifacts
89-
uses: actions/download-artifact@v4
89+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
9090
with:
9191
name: build-artifacts
9292
path: dist

‎.github/workflows/deploy-account-wide-infra.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: Git clone - ${{ inputs.branch_name }}
44-
uses: actions/checkout@v4
44+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
4545
with:
4646
ref: ${{ inputs.branch_name }}
4747

@@ -115,7 +115,7 @@ jobs:
115115

116116
steps:
117117
- name: Git clone - ${{ inputs.branch_name }}
118-
uses: actions/checkout@v4
118+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
119119
with:
120120
ref: ${{ inputs.branch_name }}
121121

‎.github/workflows/persistent-environment.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Git clone - ${{ inputs.branch_name }}
28-
uses: actions/checkout@v4
28+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2929
with:
3030
ref: ${{ inputs.branch_name }}
3131

@@ -59,15 +59,15 @@ jobs:
5959
make get-s3-perms ENV=${account} TF_WORKSPACE_NAME=${inactive_stack}
6060
6161
- name: Save Build Artifacts
62-
uses: actions/upload-artifact@v4
62+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
6363
with:
6464
name: build-artifacts
6565
path: |
6666
dist/*.zip
6767
!dist/nrlf_permissions.zip
6868
6969
- name: Save NRLF Permissions cache
70-
uses: actions/cache/save@v4
70+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7171
with:
7272
key: ${{ github.run_id }}-nrlf-permissions
7373
path: dist/nrlf_permissions.zip
@@ -84,7 +84,7 @@ jobs:
8484

8585
steps:
8686
- name: Git clone - ${{ inputs.branch_name }}
87-
uses: actions/checkout@v4
87+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
8888
with:
8989
ref: ${{ inputs.branch_name }}
9090

@@ -108,13 +108,13 @@ jobs:
108108
make truststore-pull-server ENV=${account}
109109
110110
- name: Download build artifacts
111-
uses: actions/download-artifact@v4
111+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
112112
with:
113113
name: build-artifacts
114114
path: dist
115115

116116
- name: Restore NRLF permissions cache
117-
uses: actions/cache/restore@v4
117+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
118118
with:
119119
key: ${{ github.run_id }}-nrlf-permissions
120120
path: dist/nrlf_permissions.zip
@@ -161,7 +161,7 @@ jobs:
161161

162162
steps:
163163
- name: Git clone - ${{ inputs.branch_name }}
164-
uses: actions/checkout@v4
164+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
165165
with:
166166
ref: ${{ inputs.branch_name }}
167167

@@ -171,13 +171,13 @@ jobs:
171171
poetry install --no-root
172172
173173
- name: Download build artifacts
174-
uses: actions/download-artifact@v4
174+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
175175
with:
176176
name: build-artifacts
177177
path: dist
178178

179179
- name: Restore NRLF permissions cache
180-
uses: actions/cache/restore@v4
180+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
181181
with:
182182
key: ${{ github.run_id }}-nrlf-permissions
183183
path: dist/nrlf_permissions.zip
@@ -241,7 +241,7 @@ jobs:
241241

242242
steps:
243243
- name: Git clone - ${{ inputs.branch_name }}
244-
uses: actions/checkout@v4
244+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
245245
with:
246246
ref: ${{ inputs.branch_name }}
247247

@@ -275,7 +275,7 @@ jobs:
275275

276276
steps:
277277
- name: Git clone - ${{ inputs.branch_name }}
278-
uses: actions/checkout@v4
278+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
279279
with:
280280
ref: ${{ inputs.branch_name }}
281281

@@ -309,7 +309,7 @@ jobs:
309309

310310
steps:
311311
- name: Git clone - ${{ inputs.branch_name }}
312-
uses: actions/checkout@v4
312+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
313313
with:
314314
ref: ${{ inputs.branch_name }}
315315

‎.github/workflows/pr-checks.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616

1717
steps:
1818
- name: Git clone - ${{ github.ref }}
19-
uses: actions/checkout@v4
19+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2020
with:
2121
ref: ${{ github.ref }}
2222

@@ -35,7 +35,7 @@ jobs:
3535
run: make test
3636

3737
- name: Upload build artifacts
38-
uses: actions/upload-artifact@v4
38+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
3939
with:
4040
name: build-artifacts
4141
path: dist
@@ -49,12 +49,12 @@ jobs:
4949
contents: read
5050
actions: write
5151
steps:
52-
- uses: actions/checkout@v4
52+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5353
with:
5454
ref: ${{ github.ref }}
5555

5656
- name: Get build artifacts
57-
uses: actions/download-artifact@v4
57+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
5858
with:
5959
name: build-artifacts
6060
path: dist

‎.github/workflows/pr-env-deploy.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050

5151
steps:
5252
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
53-
uses: actions/checkout@v4
53+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5454
with:
5555
ref: ${{ github.event.pull_request.head.ref }}
5656

@@ -80,21 +80,21 @@ jobs:
8080
make get-s3-perms ENV=dev
8181
8282
- name: Save Build Artifacts
83-
uses: actions/upload-artifact@v4
83+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
8484
with:
8585
name: build-artifacts
8686
path: |
8787
dist/*.zip
8888
!dist/nrlf_permissions.zip
8989
9090
- name: Save NRLF Permissions cache
91-
uses: actions/cache/save@v4
91+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
9292
with:
9393
key: ${{ github.run_id }}-nrlf-permissions
9494
path: dist/nrlf_permissions.zip
9595

9696
- name: Add Failure Pull Request Comment
97-
uses: actions/github-script@v7
97+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
9898
if: ${{ failure() }}
9999
with:
100100
script: |
@@ -119,7 +119,7 @@ jobs:
119119

120120
steps:
121121
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
122-
uses: actions/checkout@v4
122+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
123123
with:
124124
ref: ${{ github.event.pull_request.head.ref }}
125125

@@ -136,13 +136,13 @@ jobs:
136136
role-session-name: github-actions-ci-${{ needs.set-environment-id.outputs.environment_id }}
137137

138138
- name: Download Artifacts
139-
uses: actions/download-artifact@v4
139+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
140140
with:
141141
name: build-artifacts
142142
path: dist
143143

144144
- name: Restore NRLF permissions cache
145-
uses: actions/cache/restore@v4
145+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
146146
with:
147147
key: ${{ github.run_id }}-nrlf-permissions
148148
path: dist/nrlf_permissions.zip
@@ -172,7 +172,7 @@ jobs:
172172
run: terraform -chdir=terraform/infrastructure apply tfplan
173173

174174
- name: Add Success Pull Request Comment
175-
uses: actions/github-script@v7
175+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
176176
if: ${{ success() }}
177177
with:
178178
script: |
@@ -184,7 +184,7 @@ jobs:
184184
})
185185
186186
- name: Add Failure Pull Request Comment
187-
uses: actions/github-script@v7
187+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
188188
if: ${{ failure() }}
189189
with:
190190
script: |
@@ -206,7 +206,7 @@ jobs:
206206

207207
steps:
208208
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
209-
uses: actions/checkout@v4
209+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
210210
with:
211211
ref: ${{ github.event.pull_request.head.ref }}
212212

@@ -247,7 +247,7 @@ jobs:
247247

248248
steps:
249249
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
250-
uses: actions/checkout@v4
250+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
251251
with:
252252
ref: ${{ github.event.pull_request.head.ref }}
253253

@@ -286,7 +286,7 @@ jobs:
286286

287287
steps:
288288
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
289-
uses: actions/checkout@v4
289+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
290290
with:
291291
ref: ${{ github.event.pull_request.head.ref }}
292292

@@ -326,7 +326,7 @@ jobs:
326326
run: make test-performance-output
327327

328328
- name: Store Performance Test Outputs
329-
uses: actions/upload-artifact@v4
329+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
330330
with:
331331
name: performance-test-outputs
332332
path: dist/*.png

‎.github/workflows/pr-env-destroy.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151

5252
steps:
5353
- name: Git Clone - ${{ github.event.pull_request.head.ref }}
54-
uses: actions/checkout@v4
54+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5555
with:
5656
ref: ${{ github.event.pull_request.merged && github.event.pull_request.base.ref || github.event.pull_request.head.ref }}
5757

@@ -94,7 +94,7 @@ jobs:
9494
terraform -chdir=terraform/infrastructure workspace delete ${{ needs.set-environment-id.outputs.environment_id }}
9595
9696
- name: Add Failure Pull Request Comment
97-
uses: actions/github-script@v7
97+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
9898
if: ${{ failure() }}
9999
with:
100100
script: |

‎.github/workflows/release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
steps:
2222
- name: Git clone - ${{ github.ref }}
23-
uses: actions/checkout@v4
23+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2424
with:
2525
ref: ${{ github.ref }}
2626

@@ -70,7 +70,7 @@ jobs:
7070
run: bash scripts/sbom-create.sh
7171

7272
- name: Upload SBOM artifact
73-
uses: actions/upload-artifact@v4
73+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
7474
with:
7575
name: sbom-${{ github.sha }}
7676
path: sbom.spdx.json

‎.github/workflows/rollback-stack.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Git clone - ${{ github.ref }}
25-
uses: actions/checkout@v4
25+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2626
with:
2727
ref: ${{ github.ref }}
2828

0 commit comments

Comments
 (0)