Pin release workflow actions to full commit SHAs (#70)

This commit is contained in:
Yibo Zhuang
2026-09-23 09:51:48 -07:00
committed by GitHub
parent 16ec95a8fd
commit 26268c6d77
+7 -7
View File
@@ -17,11 +17,11 @@ jobs:
timeout-minutes: 60 timeout-minutes: 60
environment: publish environment: publish
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
with: with:
fetch-depth: 0 fetch-depth: 0
persist-credentials: false persist-credentials: false
- uses: actions/setup-go@v6 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
with: with:
go-version-file: go.mod go-version-file: go.mod
cache: true cache: true
@@ -43,7 +43,7 @@ jobs:
permission-contents: write permission-contents: write
permission-pull-requests: write permission-pull-requests: write
- name: Release - name: Release
uses: goreleaser/goreleaser-action@v7 uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7
with: with:
distribution: goreleaser-pro distribution: goreleaser-pro
version: "~> v2" version: "~> v2"
@@ -61,16 +61,16 @@ jobs:
runs-on: macos-26 runs-on: macos-26
timeout-minutes: 60 timeout-minutes: 60
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
with: with:
fetch-depth: 0 fetch-depth: 0
persist-credentials: false persist-credentials: false
- uses: actions/setup-go@v6 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
with: with:
go-version-file: go.mod go-version-file: go.mod
cache: true cache: true
- name: Release dry run - name: Release dry run
uses: goreleaser/goreleaser-action@v7 uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7
with: with:
distribution: goreleaser-pro distribution: goreleaser-pro
version: "~> v2" version: "~> v2"
@@ -78,7 +78,7 @@ jobs:
env: env:
GITHUB_TOKEN: ${{ github.token }} GITHUB_TOKEN: ${{ github.token }}
- name: Upload dry-run artifacts - name: Upload dry-run artifacts
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
with: with:
name: tart-guest-agent-snapshot name: tart-guest-agent-snapshot
path: dist/** path: dist/**