@@ -24,11 +24,11 @@ jobs:
2424 docker : ${{ steps.docker_changes.outputs.any_changed }}
2525 steps :
2626 - name : Checkout
27- uses : actions/checkout@v5
27+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
2828 with :
2929 fetch-depth : 0
3030 - name : Check Docker
31- uses : tj-actions/changed-files@v47
31+ uses : tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47
3232 id : docker_changes
3333 with :
3434 files : |
@@ -52,12 +52,12 @@ jobs:
5252 service : [unrealircd, atheme, unrealircd-webpanel]
5353 steps :
5454 - name : Checkout
55- uses : actions/checkout@v5
55+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
5656 - name : Setup Buildx
57- uses : docker/setup-buildx-action@v3
57+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
5858 - name : Extract metadata
5959 id : meta
60- uses : docker/metadata-action@v5
60+ uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
6161 with :
6262 images : irc-atl-chat-${{ matrix.service }}
6363 tags : |
7878 echo "version=$PR_VERSION" >> "$GITHUB_OUTPUT"
7979 echo "Generated PR version: $PR_VERSION"
8080 - name : Build ${{ matrix.service }}
81- uses : docker/build-push-action@v6
81+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
8282 timeout-minutes : 10
8383 with :
8484 context : ./${{ matrix.service == 'unrealircd-webpanel' && 'src/frontend/webpanel' || matrix.service == 'unrealircd' && 'src/backend/unrealircd' || matrix.service == 'atheme' && 'src/backend/atheme' }}
9898 echo "✅ Docker build validation for ${{ matrix.service }} completed successfully"
9999 echo "🔍 Build cache updated for faster future builds"
100100 - name : Scan Containerfile ${{ matrix.service }}
101- 101+ uses : reviewdog/action-trivy@a1e6d7dd5520369c076d7ce639a16442938535d8 # v1.14.0
102102 continue-on-error : true
103103 with :
104104 github_token : ${{ github.token }}
@@ -123,18 +123,18 @@ jobs:
123123 service : [unrealircd, atheme, unrealircd-webpanel]
124124 steps :
125125 - name : Checkout
126- uses : actions/checkout@v5
126+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
127127 - name : Setup Buildx
128- uses : docker/setup-buildx-action@v3
128+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
129129 - name : Login to Registry
130- uses : docker/login-action@v3
130+ uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
131131 with :
132132 registry : ${{ env.REGISTRY }}
133133 username : ${{ github.actor }}
134134 password : ${{ secrets.GITHUB_TOKEN }}
135135 - name : Extract metadata
136136 id : meta
137- uses : docker/metadata-action@v5
137+ uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
138138 with :
139139 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.service }}
140140 tags : |
@@ -158,7 +158,7 @@ jobs:
158158 echo "version=$RELEASE_VERSION" >> "$GITHUB_OUTPUT"
159159 echo "Generated release version: $RELEASE_VERSION"
160160 - name : Build & Push ${{ matrix.service }}
161- uses : docker/build-push-action@v6
161+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
162162 timeout-minutes : 15
163163 with :
164164 context : ./${{ matrix.service == 'unrealircd-webpanel' && 'src/frontend/webpanel' || matrix.service == 'unrealircd' && 'src/backend/unrealircd' || matrix.service == 'atheme' && 'src/backend/atheme' }}
@@ -174,7 +174,7 @@ jobs:
174174 BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
175175 - name : Scan Final Image ${{ matrix.service }}
176176 if : always()
177- 177+ uses : reviewdog/action-trivy@a1e6d7dd5520369c076d7ce639a16442938535d8 # v1.14.0
178178 continue-on-error : true
179179 with :
180180 github_token : ${{ github.token }}
@@ -198,9 +198,9 @@ jobs:
198198 service : [unrealircd, atheme, unrealircd-webpanel]
199199 steps :
200200 - name : Checkout
201- uses : actions/checkout@v5
201+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
202202 - name : Clean Old Images ${{ matrix.service }}
203- uses : actions/delete-package-versions@v5
203+ uses : actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5
204204 with :
205205 package-name : irc-atl-chat-${{ matrix.service }}
206206 package-type : container
0 commit comments