From edfd96b084b14aaaf32cd2772c5c183c11f02f87 Mon Sep 17 00:00:00 2001 From: Adam Leskis Date: Thu, 12 Nov 2026 10:39:27 +0000 Subject: [PATCH] Add lockfile to pin all gha dependencies --- .github/workflows/actions.lock | 41 +++++++++++++++++++ .../workflows/destroy_old_attack_ranges.yml | 6 +-- .github/workflows/e2e_aws_splunk_windows.yml | 16 ++++---- 3 files changed, 52 insertions(+), 11 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 00000000..cb78a4cb --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,41 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/destroy_old_attack_ranges.yml': + - 'actions/checkout@v6.1.0' + - 'actions/setup-python@v6.3.0' + - 'aws-actions/configure-aws-credentials@v5.1.1' + '.github/workflows/e2e_aws_splunk_windows.yml': + - 'actions/checkout@v6.1.0' + - 'actions/download-artifact@v4.3.0' + - 'actions/setup-python@v6.3.0' + - 'actions/upload-artifact@v4.6.2' + - 'aws-actions/configure-aws-credentials@v5.1.1' +dependencies: + 'actions/checkout@v6.1.0': + ref: 'v6.1.0' + commit: 'sha1-d23441a48e516b6c34aea4fa41551a30e30af803' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v4.3.0': + ref: 'v4.3.0' + commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-python@v6.3.0': + ref: 'v6.3.0' + commit: 'sha1-ece7cb06caefa5fff74198d8649806c4678c61a1' + owner_id: 44036562 + repo_id: 192625525 + 'actions/upload-artifact@v4.6.2': + ref: 'v4.6.2' + commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' + owner_id: 44036562 + repo_id: 192625955 + 'aws-actions/configure-aws-credentials@v5.1.1': + ref: 'v5.1.1' + commit: 'sha1-61815dcd50bd041e203e49132bacad1fd04d2708' + owner_id: 57468012 + repo_id: 220391287 diff --git a/.github/workflows/destroy_old_attack_ranges.yml b/.github/workflows/destroy_old_attack_ranges.yml index ee331b9f..a0ff94de 100644 --- a/.github/workflows/destroy_old_attack_ranges.yml +++ b/.github/workflows/destroy_old_attack_ranges.yml @@ -11,18 +11,18 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 - name: Install System Packages run: | sudo apt update -qq - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v6.3.0 with: python-version: '3.12' #Available versions here - https://github.com/actions/python-versions/releases easy to change/make a matrix/use pypy architecture: 'x64' # optional x64 or x86. Defaults to x64 if not specified - - uses: aws-actions/configure-aws-credentials@v5 + - uses: aws-actions/configure-aws-credentials@v5.1.1 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} diff --git a/.github/workflows/e2e_aws_splunk_windows.yml b/.github/workflows/e2e_aws_splunk_windows.yml index 8577aaaa..6fb2a9c5 100644 --- a/.github/workflows/e2e_aws_splunk_windows.yml +++ b/.github/workflows/e2e_aws_splunk_windows.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 - name: Install system packages run: | @@ -33,13 +33,13 @@ jobs: rm /tmp/terraform.zip terraform version - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v6.3.0 with: python-version: '3.12' architecture: 'x64' - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v5 + uses: aws-actions/configure-aws-credentials@v5.1.1 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -79,7 +79,7 @@ jobs: - name: Upload config for destroy fallback if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.6.2 with: name: e2e-attack-range-config path: config/ @@ -101,7 +101,7 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v6 + uses: actions/checkout@v6.1.0 - name: Install system packages run: | @@ -117,13 +117,13 @@ jobs: rm /tmp/terraform.zip terraform version - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v6.3.0 with: python-version: '3.12' architecture: 'x64' - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v5 + uses: aws-actions/configure-aws-credentials@v5.1.1 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -133,7 +133,7 @@ jobs: run: pip install -r requirements.txt - name: Download E2E config artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.3.0 continue-on-error: true with: name: e2e-attack-range-config