about summary refs log tree commit diff
path: root/.github/workflows/update-terraform-providers.yml
diff options
context:
space:
mode:
authorVictor Engmark <victor@engmark.name>2023-11-28 16:28:58 +1300
committerJörg Thalheim <Mic92@users.noreply.github.com>2023-11-29 09:51:22 +0100
commit4177297b141a3a8a8985dcb7dfb53550b95d3e8f (patch)
tree4eedabde0d840433b038c9897f8c2a15c3751e58 /.github/workflows/update-terraform-providers.yml
parent789f7281f096e9f9b42dbfd567d25a931f3fc14a (diff)
downloadnixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.gz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.bz2
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.lz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.xz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.zst
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.zip
ci: pin third party actions
For reproducibility.

Command:

```shell
for file in .github/workflows/*.y*ml; do
    npx pin-github-action --comment=' {ref}' "$file"
done
```

Then had to manually replace all the versions with accurate specifiers
(for example, "v4" → "v4.1.1" in case of `actions/checkout`).
Diffstat (limited to '.github/workflows/update-terraform-providers.yml')
-rw-r--r--.github/workflows/update-terraform-providers.yml6
1 files changed, 3 insertions, 3 deletions
diff --git a/.github/workflows/update-terraform-providers.yml b/.github/workflows/update-terraform-providers.yml
index 5aa1693bc9b3..c1a0e711ed07 100644
--- a/.github/workflows/update-terraform-providers.yml
+++ b/.github/workflows/update-terraform-providers.yml
@@ -16,8 +16,8 @@ jobs:
     if: github.repository_owner == 'NixOS' && github.ref == 'refs/heads/master' # ensure workflow_dispatch only runs on master
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: cachix/install-nix-action@v23
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v24
         with:
           nix_path: nixpkgs=channel:nixpkgs-unstable
       - name: setup
@@ -46,7 +46,7 @@ jobs:
         run: |
           git clean -f
       - name: create PR
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           body: |
             Automatic update by [update-terraform-providers](https://github.com/NixOS/nixpkgs/blob/master/.github/workflows/update-terraform-providers.yml) action.