Merge pull request #13395 from naveensrinivasan/naveen/feat/pin-deps

Pin actions to a full length commit SHA

.github/workflows/main.yml

@@ -9,16 +9,19 @@ env:
   GOPROXY: https://proxy.golang.org
   GOPATH: ${{ github.workspace }}/go
 
+permissions:
+  contents: read
+
 jobs:
   build-linux-amd64:
     runs-on: ubuntu-20.04
     steps:
       - name: Set up go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2 https://api.github.com/repos/actions/setup-go/git/commits/bfdd3570ce990073878bf10f6b2d79082de49492
         with:
           go-version: 1.17.5
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 https://api.github.com/repos/actions/checkout/git/tags/629c2de402a417ea7690ca6ce3f33229e27606a5
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -31,11 +34,11 @@ jobs:
     runs-on: macos-10.15
     steps:
     - name: Set up go
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2 https://api.github.com/repos/actions/setup-go/git/commits/bfdd3570ce990073878bf10f6b2d79082de49492
       with:
         go-version: 1.17.5
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 https://api.github.com/repos/actions/checkout/git/tags/629c2de402a417ea7690ca6ce3f33229e27606a5
       with:
         path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -48,11 +51,11 @@ jobs:
     runs-on: windows-2019
     steps:
     - name: Set up go
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2 https://api.github.com/repos/actions/setup-go/git/commits/bfdd3570ce990073878bf10f6b2d79082de49492
       with:
         go-version: 1.17.5
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 https://api.github.com/repos/actions/checkout/git/tags/629c2de402a417ea7690ca6ce3f33229e27606a5
       with:
         path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -65,11 +68,11 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Set up go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@bfdd3570ce990073878bf10f6b2d79082de49492 # v2 https://api.github.com/repos/actions/setup-go/git/commits/bfdd3570ce990073878bf10f6b2d79082de49492
         with:
           go-version: 1.17.5
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 https://api.github.com/repos/actions/checkout/git/tags/629c2de402a417ea7690ca6ce3f33229e27606a5
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 

.github/workflows/tag-release.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2 https://api.github.com/repos/actions/checkout/git/tags/629c2de402a417ea7690ca6ce3f33229e27606a5
       - run: /usr/bin/git config --global user.email actions@github.com
       - run: /usr/bin/git config --global user.name 'GitHub Actions Release Tagger'
       - run: hack/tag-release.sh