Merge pull request #35 from xentra-ai/renovate/pin-dependencies

chore(deps): pin dependencies
xentra-ai · Nov 14, 2023 · 2b24134 · 2b24134
2 parents cba2514 + 557fd5e
commit 2b24134
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/build-go.yaml b/.github/workflows/build-go.yaml
@@ -29,16 +29,16 @@ jobs:
       matrix:
         go-version: [ '1.21.x' ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: ${{ matrix.go-version }}
           cache: false
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3
+        uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3
         with:
           version: latest
           working-directory: ./advisor
@@ -51,10 +51,10 @@ jobs:
       matrix:
         go-version: [ '1.21.x' ]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Setup Go ${{ matrix.go-version }}
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version: ${{ matrix.go-version }}
 
@@ -68,7 +68,7 @@ jobs:
         run: go test -v ./... > test-results-${{ matrix.go-version }}.json
 
       - name: Upload Go test results
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: test-results-${{ matrix.go-version }}
           path: test-results-${{ matrix.go-version }}.json
diff --git a/.github/workflows/go-ossf-slsa3-publish.yml b/.github/workflows/go-ossf-slsa3-publish.yml
@@ -60,7 +60,7 @@ jobs:
         arch:
           - amd64
           - arm64
-    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
+    uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830 # v1.9.0
     with:
       go-version: 1.21
       config-file: .slsa-goreleaser/${{matrix.os}}-${{matrix.arch}}.yml