From c52be0f51286fd1a1118a5dea6937207933ef757 Mon Sep 17 00:00:00 2001 From: Vince Grassia <593223+vgrassia@users.noreply.github.com> Date: Mon, 6 Nov 2023 23:11:08 -0500 Subject: [PATCH] Pin all gh-actions hashes to master (#177) --- .github/workflows/DCT-test.yml | 2 +- .github/workflows/build-unified.yml | 6 +++--- .github/workflows/release-digital-ocean.yml | 2 +- .github/workflows/release-web-latest.yml | 2 +- .github/workflows/update-links.yml | 8 ++++---- .github/workflows/update-versions.yml | 6 +++--- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/DCT-test.yml b/.github/workflows/DCT-test.yml index bb62c2a..bec36ad 100644 --- a/.github/workflows/DCT-test.yml +++ b/.github/workflows/DCT-test.yml @@ -27,7 +27,7 @@ jobs: ########## DockerHub ########## - name: Setup DCT id: setup-dct - uses: bitwarden/gh-actions/setup-docker-trust@082f5e05ed97c3601c6f3179250b1a761c4d647f + uses: bitwarden/gh-actions/setup-docker-trust@master with: azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }} azure-keyvault-name: "bitwarden-ci" diff --git a/.github/workflows/build-unified.yml b/.github/workflows/build-unified.yml index a674e94..eaa3520 100644 --- a/.github/workflows/build-unified.yml +++ b/.github/workflows/build-unified.yml @@ -98,14 +98,14 @@ jobs: - name: Retrieve github PAT secrets id: retrieve-secret-pat - uses: bitwarden/gh-actions/get-keyvault-secrets@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-keyvault-secrets@master with: keyvault: "bitwarden-ci" secrets: "github-pat-bitwarden-devops-bot-repo-scope" - name: Setup Docker Trust if: ${{ env.is_publish_branch == 'true' }} - uses: bitwarden/gh-actions/setup-docker-trust@082f5e05ed97c3601c6f3179250b1a761c4d647f + uses: bitwarden/gh-actions/setup-docker-trust@master with: azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }} azure-keyvault-name: "bitwarden-ci" @@ -191,7 +191,7 @@ jobs: - name: Retrieve secrets id: retrieve-secrets - uses: bitwarden/gh-actions/get-keyvault-secrets@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-keyvault-secrets@master if: failure() with: keyvault: "bitwarden-ci" diff --git a/.github/workflows/release-digital-ocean.yml b/.github/workflows/release-digital-ocean.yml index 255aa2b..7946ae3 100644 --- a/.github/workflows/release-digital-ocean.yml +++ b/.github/workflows/release-digital-ocean.yml @@ -26,7 +26,7 @@ jobs: - name: Retrieve secrets id: retrieve-secrets - uses: bitwarden/gh-actions/get-keyvault-secrets@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-keyvault-secrets@master with: keyvault: "bitwarden-ci" secrets: "digital-ocean-api-key" diff --git a/.github/workflows/release-web-latest.yml b/.github/workflows/release-web-latest.yml index 66817b2..59a5a12 100644 --- a/.github/workflows/release-web-latest.yml +++ b/.github/workflows/release-web-latest.yml @@ -32,7 +32,7 @@ jobs: ########## DockerHub ########## - name: Setup DCT id: setup-dct - uses: bitwarden/gh-actions/setup-docker-trust@082f5e05ed97c3601c6f3179250b1a761c4d647f + uses: bitwarden/gh-actions/setup-docker-trust@master with: azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }} azure-keyvault-name: "bitwarden-ci" diff --git a/.github/workflows/update-links.yml b/.github/workflows/update-links.yml index 71b113c..fea405d 100644 --- a/.github/workflows/update-links.yml +++ b/.github/workflows/update-links.yml @@ -44,7 +44,7 @@ jobs: fi - name: Update Bitwarden Script PowerShell Link - uses: bitwarden/gh-actions/update-rebrandly-link@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/update-rebrandly-link@master with: apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }} domain: "go.btwrdn.co" @@ -52,7 +52,7 @@ jobs: destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/bitwarden.ps1" - name: Update Run Script PowerShell Link - uses: bitwarden/gh-actions/update-rebrandly-link@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/update-rebrandly-link@master with: apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }} domain: "go.btwrdn.co" @@ -60,7 +60,7 @@ jobs: destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/run.ps1" - name: Update Bitwarden Script Shell Link - uses: bitwarden/gh-actions/update-rebrandly-link@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/update-rebrandly-link@master with: apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }} domain: "go.btwrdn.co" @@ -68,7 +68,7 @@ jobs: destination: "https://github.com/bitwarden/self-host/releases/download/${{ steps.tag-name.outputs.value }}/bitwarden.sh" - name: Update Run Script Shell Link - uses: bitwarden/gh-actions/update-rebrandly-link@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/update-rebrandly-link@master with: apikey: ${{ steps.retrieve-secrets.outputs.rebrandly-apikey }} domain: "go.btwrdn.co" diff --git a/.github/workflows/update-versions.yml b/.github/workflows/update-versions.yml index e2811c8..a4a96d6 100644 --- a/.github/workflows/update-versions.yml +++ b/.github/workflows/update-versions.yml @@ -24,7 +24,7 @@ jobs: - name: Get Latest Core Version id: get-core - uses: bitwarden/gh-actions/get-release-version@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-release-version@master with: repository: bitwarden/server trim: true @@ -46,7 +46,7 @@ jobs: - name: Get Latest Web Version id: get-web - uses: bitwarden/gh-actions/get-release-version@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-release-version@master with: repository: bitwarden/clients monorepo: true @@ -70,7 +70,7 @@ jobs: - name: Get Latest Key Connector Version id: get-key-connector - uses: bitwarden/gh-actions/get-release-version@c86ced0dc8c9daeecf057a6333e6f318db9c5a2b + uses: bitwarden/gh-actions/get-release-version@master with: repository: bitwarden/key-connector trim: true