77 runs-on : ubuntu-latest
88 steps :
99 - name : Checkout
10- uses : actions/checkout@v6
10+ # https://github.com/actions/checkout
11+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
1112 with :
1213 fetch-depth : 0
1314 # This prepares directory where github/codeql-action/upload-sarif@v1 looks up report files by default.
1617 run : mkdir -p ../results
1718
1819 - name : Scan yaml files with kube-linter
19- uses : stackrox/kube-linter-action@v1.0.7
20+ # https://github.com/stackrox/kube-linter-action
21+ uses : stackrox/kube-linter-action@87802a2f4e01abebb3ee3c67a3002fea71f6eae5 # v1.0.7
2022 id : kube-linter-action-scan
2123 with :
2224 # Adjust this directory to the location where your kubernetes resources and helm charts are located.
2830 continue-on-error : true
2931
3032 - name : Upload SARIF report files to GitHub
31- uses : github/codeql-action/upload-sarif@v4
33+ # https://github.com/github/codeql-action
34+ uses : github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
3235
3336 # Ensure the workflow eventually fails if files did not pass kube-linter checks.
3437 - name : Verify kube-linter-action succeeded
@@ -40,23 +43,27 @@ jobs:
4043 runs-on : ubuntu-latest
4144 steps :
4245 - name : Checkout
43- uses : actions/checkout@v6
46+ # https://github.com/actions/checkout
47+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
4448 with :
4549 fetch-depth : 0
4650
4751 - name : Set up Helm
48- uses : azure/setup-helm@v4.3.1
52+ # https://github.com/azure/setup-helm
53+ uses : azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
4954 with :
5055 version : v3.17.0
5156
52- - uses : actions/setup-python@v6.2.0
57+ - name : Set up Python
58+ # https://github.com/actions/setup-python
59+ uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
5360 with :
5461 python-version : " 3.x"
5562 check-latest : true
5663
57- # https://github.com/helm/chart-testing-action
5864 - name : Set up chart-testing
59- uses : helm/chart-testing-action@v2.8.0
65+ # https://github.com/helm/chart-testing-action
66+ uses : helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0
6067
6168 - name : Run chart-testing (list-changed)
6269 id : list-changed
7279
7380 - name : Create kind cluster
7481 if : steps.list-changed.outputs.changed == 'true'
75- uses : helm/kind-action@v1.12.0
82+ # https://github.com/helm/kind-action
83+ uses : helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
7684
7785 - name : Run chart-testing (install)
7886 if : steps.list-changed.outputs.changed == 'true'
0 commit comments