chore(ci): replace tags with hashes

Signed-off-by: Luca Guerra <[email protected]>
falcosecurity · Oct 23, 2023 · 29cc22e · 29cc22e
1 parent 1bf07bc
commit 29cc22e
Show file tree

Hide file tree

Showing 9 changed files with 23 additions and 23 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
       libsinsp_changed: ${{ steps.filter.outputs.libsinsp }}
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: dorny/paths-filter@v2
+    - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
       id: filter
       with:
         filters: |
@@ -335,7 +335,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: uraimo/run-on-arch-action@v2.2.0
+      - uses: uraimo/run-on-arch-action@4ed76f16f09d12e83abd8a49e1ac1e5bf08784d4 # v2.5.1
         name: Run s390x build 🏗️
         with:
           arch: s390x
@@ -477,7 +477,7 @@ jobs:
           sudo ../test/e2e/scripts/run_tests.sh
 
       - name: Archive test reports
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         if: failure()
         with:
           name: ${{ matrix.name }}_report

diff --git a/.github/workflows/driver-api-version.yml b/.github/workflows/driver-api-version.yml
@@ -16,7 +16,7 @@ jobs:
       driver_api_changed: ${{ steps.filter.outputs.driver_api }}
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: dorny/paths-filter@v2
+    - dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
       id: filter
       with:
         filters: |
@@ -31,7 +31,7 @@ jobs:
     if: needs.paths-filter.outputs.driver_api_changed == 'false'
     steps:
       - name: Check driver API_VERSION
-        uses: mshick/add-pr-comment@v2
+        uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1
         with:
           message: |
             Please double check **driver/API_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#api-version-number).

diff --git a/.github/workflows/driver-schema-version.yml b/.github/workflows/driver-schema-version.yml
@@ -18,7 +18,7 @@ jobs:
       driver_schema_changed: ${{ steps.filter.outputs.driver_schema }}
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: dorny/paths-filter@v2
+    - dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
       id: filter
       with:
         filters: |
@@ -35,7 +35,7 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Check driver SCHEMA_VERSION
-        uses: mshick/add-pr-comment@v2
+        uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1
         with:
           message: |
             Please double check **driver/SCHEMA_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#schema-version-number).

diff --git a/.github/workflows/latest-kernel.yml b/.github/workflows/latest-kernel.yml
@@ -47,7 +47,7 @@ jobs:
           echo "latest_vers=$(grep kernelrelease dk.yaml | awk -F": " '{print $2}')" >> $GITHUB_OUTPUT
       
       - name: Upload driverkit config
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: driverkit_config.yaml
           path: linux/dk.yaml
@@ -59,7 +59,7 @@ jobs:
           driverkit docker -c linux/dk.yaml -l debug
           
       - name: Update README badge
-        uses: schneegans/dynamic-badges-action@v1.6.0
+        uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0
         if: always() && github.event_name == 'schedule'
         with:
           auth: ${{ secrets.FEDEDP_GIST_SECRET }}

diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
@@ -27,12 +27,12 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Download matrix X64
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
           name: matrix_X64
 
       - name: Download matrix ARM64
-        uses: actions/download-artifact@v3
+        actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
           name: matrix_ARM64
 
@@ -42,17 +42,17 @@ jobs:
           sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/matrix_X64.md
           sed -i '1s/^/---\nhide:\n- toc\n---\n\n/' docs/matrix_ARM64.md
 
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@v2 # TODO upgrade
         with:
           python-version: 3.x
 
       - run: pip install mkdocs mkdocs-material
 
       - run: mkdocs build
 
-      - uses: actions/upload-pages-artifact@v1
+      - uses: actions/upload-pages-artifact@v1 # TODO upgrade
         with:
           path: 'site'
 
       - id: deployment
-        uses: actions/deploy-pages@v1
+        uses: actions/deploy-pages@v1 # TODO upgrade
diff --git a/.github/workflows/release-body-driver.yml b/.github/workflows/release-body-driver.yml
@@ -15,7 +15,7 @@ jobs:
       is_latest: ${{ steps.get_settings.outputs.is_latest }} 
     steps:
       - name: Get latest release
-        uses: rez0n/[email protected]
+        uses: rez0n/actions-github-release@27a57820ee808f8fd940c8a9d1f7188f854aa2b5 # v2.0
         id: latest_release
         env:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -78,12 +78,12 @@ jobs:
           echo "" >> release-body.md
       
       - name: Download matrix X64
-        uses: actions/download-artifact@v3
+        actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
           name: matrix_X64
 
       - name: Download matrix ARM64
-        uses: actions/download-artifact@v3
+        actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
           name: matrix_ARM64
 
@@ -118,7 +118,7 @@ jobs:
           echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md    
 
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
         with:
           body_path: ./release-body.md
           tag_name: ${{ github.event.release.tag_name }}

diff --git a/.github/workflows/release-body-libs.yml b/.github/workflows/release-body-libs.yml
@@ -15,7 +15,7 @@ jobs:
       is_latest: ${{ steps.get_settings.outputs.is_latest }} 
     steps:
       - name: Get latest release
-        uses: rez0n/[email protected]
+        uses: rez0n/actions-github-release@27a57820ee808f8fd940c8a9d1f7188f854aa2b5 # v2.0
         id: latest_release
         env:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -94,7 +94,7 @@ jobs:
           echo "#### Release Manager @${{ github.event.release.author.login }}" >> release-body.md
         
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
         with:
           body_path: ./release-body.md
           tag_name: ${{ github.event.release.tag_name }}

diff --git a/.github/workflows/reusable_kernel_tests.yaml b/.github/workflows/reusable_kernel_tests.yaml
@@ -78,7 +78,7 @@ jobs:
         run: |
           tar -cvf ansible_output.tar ~/ansible_output_${{ github.run_id }}
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: ansible_output_${{matrix.architecture}}
           path: ansible_output.tar
@@ -96,7 +96,7 @@ jobs:
         run: |
           ./matrix_gen --root-folder ~/ansible_output_${{ github.run_id }} --output-file matrix_${{matrix.architecture}}.md
         
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: matrix_${{matrix.architecture}}
           path: ./matrix_gen/matrix_${{matrix.architecture}}.md

diff --git a/.github/workflows/update-syscalls.yml b/.github/workflows/update-syscalls.yml
@@ -28,7 +28,7 @@ jobs:
           syscalls-bumper --repo-root $(pwd) --overwrite
           
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5-rc
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           signoff: true
           base: master