@@ -11,47 +11,47 @@ permissions:
1111 contents : read
1212 # packages: read
1313env :
14- GO_VERSION : 1.22.7
14+ GO_VERSION : 1.23.5
1515jobs :
1616 build-linux-binary :
1717 if : startsWith(github.ref, 'refs/tags/v')
1818 runs-on : ubuntu-latest
1919 permissions :
2020 # https://github.com/marketplace/actions/goreleaser-action
2121 contents : write
22- # actions/upload-artifact@v3
22+ # actions/upload-artifact
2323 actions : write
2424 steps :
2525 - name : Checkout
26- uses : actions/checkout@v3
26+ uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
2727 with :
2828 fetch-depth : 0
2929 - name : gcc install
3030 run : sudo apt-get update; sudo apt install gcc-aarch64-linux-gnu
3131 - name : Get tag
32- uses : little-core-labs/get-git-tag@v3.0.2
32+ uses : little-core-labs/get-git-tag@2c292ff564c1a61b989e29f0410d131317f89b03 # v3.0.2
3333 id : tag
3434 - name : Set up Go
35- uses : actions/setup-go@v3
35+ uses : actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
3636 with :
3737 go-version : ${{ env.GO_VERSION }}
3838 - name : Get Latest Release
3939 id : latest_version
40- uses : pozetroninc/github-action-get-latest-release@master
40+ uses : pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # master
4141 with :
4242 owner : ${{ github.repository_owner }}
4343 repo : datadog-operator
4444 excludes : prerelease, draft
4545 token : ${{ secrets.GITHUB_TOKEN }}
4646 - name : Run GoReleaser
47- uses : goreleaser/goreleaser-action@v3
47+ uses : goreleaser/goreleaser-action@b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757 # v3.2.0
4848 with :
4949 version : 2.4.1
5050 args : release --skip=publish --config .goreleaser-for-linux.yaml
5151 env :
5252 GORELEASER_PREVIOUS_TAG : ${{steps.latest_version.outputs.release}}
5353 - name : Upload
54- uses : actions/upload-artifact@v3
54+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
5555 with :
5656 name : kubectl-datadog-linux
5757 path : |
@@ -64,35 +64,35 @@ jobs:
6464 permissions :
6565 # https://github.com/marketplace/actions/goreleaser-action
6666 contents : write
67- # actions/upload-artifact@v3
67+ # actions/upload-artifact
6868 actions : write
6969 steps :
70- - uses : actions/checkout@v3
70+ - uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
7171 with :
7272 fetch-depth : 0
7373 - name : Get tag
74- uses : little-core-labs/get-git-tag@v3.0.2
74+ uses : little-core-labs/get-git-tag@2c292ff564c1a61b989e29f0410d131317f89b03 # v3.0.2
7575 id : tag
7676 - name : Set up Go
77- uses : actions/setup-go@v3
77+ uses : actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
7878 with :
7979 go-version : ${{ env.GO_VERSION }}
8080 - name : Get Latest Release
8181 id : latest_version
82- uses : pozetroninc/github-action-get-latest-release@master
82+ uses : pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # master
8383 with :
8484 owner : ${{ github.repository_owner }}
8585 repo : datadog-operator
8686 excludes : prerelease, draft
8787 token : ${{ secrets.GITHUB_TOKEN }}
8888 - name : Build
89- uses : goreleaser/goreleaser-action@v3
89+ uses : goreleaser/goreleaser-action@b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757 # v3.2.0
9090 with :
9191 args : release --skip=publish --config .goreleaser-for-darwin.yaml
9292 env :
9393 GORELEASER_PREVIOUS_TAG : ${{steps.latest_version.outputs.release}}
9494 - name : Upload
95- uses : actions/upload-artifact@v3
95+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
9696 with :
9797 name : kubectl-datadog-darwin
9898 path : |
@@ -104,35 +104,35 @@ jobs:
104104 permissions :
105105 # https://github.com/marketplace/actions/goreleaser-action
106106 contents : write
107- # actions/upload-artifact@v3
107+ # actions/upload-artifact
108108 actions : write
109109 steps :
110- - uses : actions/checkout@v3
110+ - uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
111111 with :
112112 fetch-depth : 0
113113 - name : Get tag
114- uses : little-core-labs/get-git-tag@v3.0.2
114+ uses : little-core-labs/get-git-tag@2c292ff564c1a61b989e29f0410d131317f89b03 # v3.0.2
115115 id : tag
116116 - name : Set up Go
117- uses : actions/setup-go@v3
117+ uses : actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
118118 with :
119119 go-version : ${{ env.GO_VERSION }}
120120 - name : Get Latest Release
121121 id : latest_version
122- uses : pozetroninc/github-action-get-latest-release@master
122+ uses : pozetroninc/github-action-get-latest-release@53d33d213ee71c72360e3c829caf7cee94ec21e2 # master
123123 with :
124124 owner : ${{ github.repository_owner }}
125125 repo : datadog-operator
126126 excludes : prerelease, draft
127127 token : ${{ secrets.GITHUB_TOKEN }}
128128 - name : Build
129- uses : goreleaser/goreleaser-action@v3
129+ uses : goreleaser/goreleaser-action@b508e2e3ef3b19d4e4146d4f8fb3ba9db644a757 # v3.2.0
130130 with :
131131 args : release --skip=publish --config .goreleaser-for-windows.yaml
132132 env :
133133 GORELEASER_PREVIOUS_TAG : ${{steps.latest_version.outputs.release}}
134134 - name : Upload
135- uses : actions/upload-artifact@v3
135+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
136136 with :
137137 name : kubectl-datadog-windows
138138 path : |
@@ -146,13 +146,13 @@ jobs:
146146 # https://github.com/marketplace/actions/goreleaser-action
147147 # https://github.com/softprops/action-gh-release?tab=readme-ov-file#permissions
148148 contents : write
149- # actions/download-artifact@v3
149+ # actions/download-artifact
150150 actions : read
151151 # rajatjindal/krew-release-bot@v0.0.43
152152 pull-requests : write
153153 steps :
154154 - name : Checkout
155- uses : actions/checkout@v3
155+ uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
156156 with :
157157 fetch-depth : 0
158158 - name : Make directories
@@ -161,22 +161,22 @@ jobs:
161161 mkdir -p ./dist/darwin
162162 mkdir -p ./dist/windows
163163 - name : Download linux binaries
164- uses : actions/download-artifact@v3
164+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
165165 with :
166166 name : kubectl-datadog-linux
167167 path : ./tmp-build/linux
168168 - name : Download darwin binaries
169- uses : actions/download-artifact@v3
169+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
170170 with :
171171 name : kubectl-datadog-darwin
172172 path : ./tmp-build/darwin
173173 - name : Download windows binaries
174- uses : actions/download-artifact@v3
174+ uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
175175 with :
176176 name : kubectl-datadog-windows
177177 path : ./tmp-build/windows
178178 - name : Get tag
179- uses : little-core-labs/get-git-tag@v3.0.2
179+ uses : little-core-labs/get-git-tag@2c292ff564c1a61b989e29f0410d131317f89b03 # v3.0.2
180180 id : tag
181181 - name : Prepare ./dist folder
182182 run : |
@@ -191,7 +191,7 @@ jobs:
191191 - name : Generate Plugin manifest
192192 run : ./hack/release/generate-plugin-manifest.sh ${{steps.tag.outputs.tag}}
193193 - name : Release
194- uses : softprops/action-gh-release@v1
194+ uses : softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1.0.0
195195 with :
196196 body_path : dist/CHANGELOG.md
197197 prerelease : ${{ contains(github.ref, '-rc.') }}
@@ -204,7 +204,7 @@ jobs:
204204 COMMIT_TAG : ${{steps.tag.outputs.tag}}
205205 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
206206 - name : Update new plugin version in krew-index
207- uses : rajatjindal/krew-release-bot@v0.0.43
207+ uses : rajatjindal/krew-release-bot@92da038bbf995803124a8e50ebd438b2f37bbbb0 # v0.0.43
208208 continue-on-error : true
209209 with :
210210 krew_template_file : dist/datadog-plugin.yaml
0 commit comments