Merge pull request #347 from square/nunger.pin-actions

Pin GitHub Actions

.github/workflows/lint.yaml

@@ -3,7 +3,7 @@ name: Lint
 
 on:
   pull_request:
-    branches: [ master ]
+    branches: [master]
 
 jobs:
   golangci:
@@ -11,14 +11,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Setup Go environment
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # ratchet:actions/setup-go@v5
         with:
           go-version: 'stable'
           check-latest: true
       - name: Golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # ratchet:golangci/golangci-lint-action@v8
         with:
           version: v2.3.0
           install-mode: goinstall

.github/workflows/release.yaml

@@ -3,7 +3,7 @@ name: Release
 
 on:
   push:
-    tags: [ "*" ]
+    tags: ["*"]
 
 jobs:
   build:
@@ -12,23 +12,23 @@ jobs:
       matrix:
         version: ['stable']
         target:
-          - { os: 'darwin', platform: 'macos-latest', arch: 'amd64' }
-          - { os: 'linux', platform: 'ubuntu-latest', arch: 'amd64' }
-          - { os: 'windows', platform: 'windows-latest', arch: 'amd64' }
+          - {os: 'darwin', platform: 'macos-latest', arch: 'amd64'}
+          - {os: 'linux', platform: 'ubuntu-latest', arch: 'amd64'}
+          - {os: 'windows', platform: 'windows-latest', arch: 'amd64'}
     runs-on: ${{ matrix.target.platform }}
     steps:
       - name: Setup Go environment
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # ratchet:actions/setup-go@v5
         with:
           go-version: ${{ matrix.version }}
           check-latest: true
         id: go
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Build binary
         run: go build -o certigo .
       - name: Upload a Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # ratchet:actions/upload-artifact@v4
         with:
           name: certigo-${{ matrix.target.os }}-${{ matrix.target.arch }}
           path: certigo
@@ -36,15 +36,15 @@ jobs:
   release:
     name: Create release
     runs-on: ubuntu-latest
-    needs: [ build ]
+    needs: [build]
     outputs:
       upload_url: ${{ steps.create_release.outputs.upload_url }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Create release
         id: create_release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # ratchet:actions/create-release@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -57,22 +57,22 @@ jobs:
   add-assets:
     name: Add assets
     runs-on: ubuntu-latest
-    needs: [ build, release ]
+    needs: [build, release]
     strategy:
       matrix:
         target:
-          - { os: 'darwin', arch: 'amd64' }
-          - { os: 'linux', arch: 'amd64' }
-          - { os: 'windows', arch: 'amd64' }
+          - {os: 'darwin', arch: 'amd64'}
+          - {os: 'linux', arch: 'amd64'}
+          - {os: 'windows', arch: 'amd64'}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
         with:
           name: certigo-${{ matrix.target.os }}-${{ matrix.target.arch }}
           path: dist
       - name: Upload artifact to release
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # ratchet:actions/upload-release-asset@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

.github/workflows/test.yaml

@@ -3,9 +3,9 @@ name: Test
 
 on:
   push:
-    branches: [ master ]
+    branches: [master]
   pull_request:
-    branches: [ master ]
+    branches: [master]
 
 jobs:
   build:
@@ -13,9 +13,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Setup Go environment
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # ratchet:actions/setup-go@v5
         with:
           go-version: 'stable'
           check-latest: true
@@ -28,18 +28,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup Go environment
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # ratchet:actions/setup-go@v5
         with:
           go-version: 'stable'
           check-latest: true
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # ratchet:actions/setup-python@v5
         with:
           python-version: '3.x'
       - name: Install cram
         run: pip install cram
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
       - name: Build binary
         run: go build
       - name: Run tests