Skip to content

pin GitHub Actions to full-length commit SHA #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
shige wants to merge 1 commit into
base: main
Choose a base branch
from
Open

pin GitHub Actions to full-length commit SHA #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/terraform-all-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,10 @@ jobs:

steps:
- name: Clone repo
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

- name: Tfsec
uses: aquasecurity/tfsec-pr-commenter-action@v1.3.1
uses: aquasecurity/tfsec-pr-commenter-action@7a44c5dcde5dfab737363e391800629e27b6376b # v1.3.1
with:
github_token: ${{ github.token }}
tfsec_args: --ignore-hcl-errors
Expand All @@ -40,7 +40,7 @@ jobs:
run: echo "version=$(cat .terraform-version)" >> $GITHUB_OUTPUT

- name: Setup Terraform
uses: hashicorp/setup-terraform@v3
uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
with:
terraform_version: ${{ steps.check.outputs.version }}

Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/terraform-apply.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,14 +35,14 @@ jobs:

steps:
- name: Clone repo
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

- name: Get Terraform version
id: check
run: echo "version=$(cat .terraform-version)" >> ${GITHUB_OUTPUT}

- name: Setup Terraform
uses: hashicorp/setup-terraform@v3
uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
with:
terraform_version: ${{ steps.check.outputs.version }}

Expand All @@ -51,13 +51,13 @@ jobs:
make prepare GITHUB_ACTIONS=true APP_ID=${{ variables.< Terraform Apply用に作成したGitHub AppのAPP IDの値を設定したSecret key > }} APP_INSTALLATION_ID=${{ variables.< Terraform Apply用に作成したGitHub AppのINSTALLATION IDの値を設定したSecret key > }}

- name: Setup tfcmt
uses: shmokmt/actions-setup-tfcmt@v2
uses: shmokmt/actions-setup-tfcmt@04d5aa6dc61eaa69a4d00257224c9b97f4857819 # v2
with:
version: v4.8.0

- name: Generate token
id: generate_token
uses: actions/create-github-app-token@v1
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
with:
app-id: ${{ variables.< Terraform Apply用に作成したGitHub AppのAPP IDの値を設定したSecret key > }}
private-key: ${{ secrets.< Terraform Apply用に作成したGitHub AppのPRIVATE KEYの値を設定したSecret key > }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/terraform-plan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,25 +25,25 @@ jobs:

steps:
- name: Clone repo
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

- name: Get Terraform version
id: check
run: echo "version=$(cat .terraform-version)" >> $GITHUB_OUTPUT

- name: Setup Terraform
uses: hashicorp/setup-terraform@v3
uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
with:
terraform_version: ${{ steps.check.outputs.version }}

- name: Setup tfcmt
uses: shmokmt/actions-setup-tfcmt@v2
uses: shmokmt/actions-setup-tfcmt@04d5aa6dc61eaa69a4d00257224c9b97f4857819 # v2
with:
version: v4.8.0

- name: Generate token
id: generate_token
uses: actions/create-github-app-token@v1
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
with:
app-id: ${{ variables.< Terraform Plan用に作成したGitHub AppのAPP IDの値を設定したSecret key > }}
private-key: ${{ secrets.< Terraform Apply用に作成したGitHub AppのPRIVATE KEYの値を設定したSecret key > }}
Expand Down