chore: : lock GitHub Actions versions using commits 👮‍♂️ (#492)

chainflip-io · Dec 20, 2023 · 3813b43 · 3813b43
1 parent 6fa028e
commit 3813b43
Show file tree

Hide file tree

Showing 9 changed files with 66 additions and 66 deletions.
diff --git a/.github/workflows/.docker-build.yml b/.github/workflows/.docker-build.yml
@@ -14,17 +14,17 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -33,14 +33,14 @@ jobs:
             type=sha,format=long,prefix=,
 
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
         with:
           context: .
           push: true

diff --git a/.github/workflows/.lint.yml b/.github/workflows/.lint.yml
@@ -6,18 +6,18 @@ jobs:
     runs-on: [self-hosted, linux, x64, ephemeral]
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
         with:
           node-version: "14"
 
       - name: Install Python virtualenv
         run: pip install virtualenv
 
       - name: Install and configure Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@93ada01c735cc8a383ce0ce2ae205a21c415379b
 
       - run: npm install
       - run: npx solhint -w 0 'contracts/**/*.sol'

diff --git a/.github/workflows/create-geth-arb-network.yml b/.github/workflows/create-geth-arb-network.yml
@@ -42,17 +42,17 @@ jobs:
     runs-on: [self-hosted, linux, x64, ephemeral]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4
         with:
           images: ghcr.io/${{ github.repository }}/geth-base
           flavor: |
@@ -62,14 +62,14 @@ jobs:
             type=raw,value=latest
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
         with:
           context: ci/docker/arb-geth/
           push: true
@@ -95,12 +95,12 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           ref: ${{ inputs.tag }}
 
       - name: Checkout chainflip-backend @ ${{ inputs.chainflip_backend_ref }}
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           token: ${{ secrets.CF_GITHUB_BOT_READONLY_BACKEND_REPO }}
           repository: chainflip-io/chainflip-backend
@@ -112,7 +112,7 @@ jobs:
           echo "AGG_KEY=$(jq -r .eth_agg_key chainflip-backend/localnet/init/keyshare/${{ inputs.genesis_validators }}-node/agg_keys.json)" >> $GITHUB_ENV
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -122,12 +122,12 @@ jobs:
         run: pip install virtualenv
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
         with:
           node-version: "16"
 
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@93ada01c735cc8a383ce0ce2ae205a21c415379b
 
       - run: npm install --global ganache-cli
       - run: npm install --global yarn
@@ -166,7 +166,7 @@ jobs:
         run: echo ${{ env.AGG_KEY }} > agg_key
 
       - name: Save artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
         with:
           name: ${{ env.IMAGE_TAG }}
           path: |
@@ -183,10 +183,10 @@ jobs:
       - build-geth-state
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Checkout chainflip-io/nitro-testnode @ ${{ inputs.nitro_testnodes_ref }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           token: ${{ secrets.CF_GITHUB_BOT_READONLY_BACKEND_REPO }}
           repository: chainflip-io/nitro-testnode
@@ -195,7 +195,7 @@ jobs:
           submodules: true
 
       - name: Checkout chainflip-backend @ ${{ inputs.chainflip_backend_ref }}
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           token: ${{ secrets.CF_GITHUB_BOT_READONLY_BACKEND_REPO }}
           repository: chainflip-io/chainflip-backend
@@ -207,13 +207,13 @@ jobs:
           echo "AGG_KEY=$(jq -r .eth_agg_key chainflip-backend/localnet/init/keyshare/${{ inputs.genesis_validators }}-node/agg_keys.json)" >> $GITHUB_ENV
 
       - name: Download Geth Initial State
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4
         with:
           name: ${{ env.IMAGE_TAG }}
           path: ./nitro-testnode/${{ env.GETH_INITIAL_STATE_DIR }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -242,12 +242,12 @@ jobs:
         run: pip install virtualenv
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
         with:
           node-version: "16"
 
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@93ada01c735cc8a383ce0ce2ae205a21c415379b
 
       - run: npm install --global ganache-cli
       - run: npm install --global yarn
@@ -292,7 +292,7 @@ jobs:
           sudo chmod -R 777 ./nitro-testnode/data
 
       - name: Save artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
         with:
           name: ${{ env.IMAGE_TAG }}-localnet-initial-state
           path: |
@@ -317,33 +317,33 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up QEMU ⚙️
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3
 
       - name: Set up Docker Buildx 👷
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226
         with:
           driver-opts: |
             image=moby/buildkit:v0.10.6
 
       - name: Docker meta 🔖
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4
         with:
           images: ghcr.io/${{ github.repository }}/localnet-initial-state
           tags: ${{ env.IMAGE_TAG }}
 
       - name: Login to GitHub Container Registry ➡️🦑
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Download Initial State from previous job
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@7a1cd3216ca9260cd8022db641d960b1db4d1be4
         with:
           name: ${{ env.IMAGE_TAG }}-localnet-initial-state
           path: ./localnet-initial-state
@@ -356,7 +356,7 @@ jobs:
         run: echo "current_datetime=$(date -u +"%b %d, %Y at %R UTC")" >> $GITHUB_OUTPUT
 
       - name: Build Initial State Image 🫙
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
         with:
           context: .
           file: ci/docker/localnet-initial-state.Dockerfile

diff --git a/.github/workflows/create-geth-image-legacy.yml b/.github/workflows/create-geth-image-legacy.yml
@@ -26,17 +26,17 @@ jobs:
     runs-on: [self-hosted, linux, x64, ephemeral]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4
         with:
           images: ghcr.io/${{ github.repository }}/geth-base
           flavor: |
@@ -46,14 +46,14 @@ jobs:
             type=raw,value=latest
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
         with:
           context: ci/docker/geth/
           push: true
@@ -79,12 +79,12 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           ref: ${{ inputs.tag }}
 
       - name: Checkout chainflip-backend @ ${{ inputs.chainflip_backend_ref }}
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           token: ${{ secrets.CF_GITHUB_BOT_READONLY_BACKEND_REPO }}
           repository: chainflip-io/chainflip-backend
@@ -96,7 +96,7 @@ jobs:
           echo "AGG_KEY=$(jq -r .eth_agg_key chainflip-backend/localnet/init/keyshare/${{ inputs.genesis_validators }}-node/agg_keys.json)" >> $GITHUB_ENV
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -106,12 +106,12 @@ jobs:
         run: pip install virtualenv
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
         with:
           node-version: "16"
 
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@93ada01c735cc8a383ce0ce2ae205a21c415379b
 
       - run: npm install --global ganache-cli
       - run: npm install --global yarn
@@ -159,7 +159,7 @@ jobs:
         run: echo ${{ env.AGG_KEY }} > agg_key
 
       - name: Save artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
         with:
           name: ${{ env.IMAGE_TAG }}
           path: |

diff --git a/.github/workflows/fuzzer-tests.yml b/.github/workflows/fuzzer-tests.yml
@@ -20,20 +20,20 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses:  actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Setup Python
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
         with:
           python-version: "3.7"
 
       - name: Setup Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65
         with:
           node-version: "14"
 
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@93ada01c735cc8a383ce0ce2ae205a21c415379b
 
       - run: npm install
       - run: npm install --global ganache-cli