From 0789ce29b0e909957ce171bc03a378c2d734620e Mon Sep 17 00:00:00 2001
From: Stig Otnes Kolstad <stig.otnes.kolstad@nrk.no>
Date: Tue, 31 Oct 2023 10:04:48 +0100
Subject: [PATCH] ci: lock action versions to patch level

---
 .github/workflows/autodoc.yaml      |  4 ++--
 .github/workflows/lint-release.yaml |  2 +-
 .github/workflows/workflow.yaml     | 18 +++++++++---------
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/autodoc.yaml b/.github/workflows/autodoc.yaml
index 3f04fca..67b590a 100644
--- a/.github/workflows/autodoc.yaml
+++ b/.github/workflows/autodoc.yaml
@@ -16,12 +16,12 @@ jobs:
           ssh-private-key: "${{ secrets.SSH_KEY_AUTODOC }}"
       -
         name: Configure Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v4.7.1
         with:
           python-version: 3.11
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
         with:
           ref: ${{ github.head_ref }}
           fetch-depth: 0
diff --git a/.github/workflows/lint-release.yaml b/.github/workflows/lint-release.yaml
index 819d3d0..a21b3ff 100644
--- a/.github/workflows/lint-release.yaml
+++ b/.github/workflows/lint-release.yaml
@@ -4,6 +4,6 @@ on: [push, pull_request]
 name: Commit lint and release
 jobs:
   lint_release:
-    uses: nrkno/github-workflow-semantic-release/.github/workflows/workflow.yaml@v2
+    uses: nrkno/github-workflow-semantic-release/.github/workflows/workflow.yaml@v2.1.0
     with:
       runs-on: ubuntu-latest
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 76d9eef..6b0e81f 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -127,9 +127,9 @@ jobs:
           terraform_token=$(jq -r .token <<<$token)
           echo "terraform_token=$terraform_token" >> "$GITHUB_OUTPUT"
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.1
 
-      - uses: hashicorp/setup-terraform@v2
+      - uses: hashicorp/setup-terraform@v2.0.3
         with:
           terraform_version: ${{ inputs.terraform-version }}
           terraform_wrapper: false
@@ -252,7 +252,7 @@ jobs:
           rm -r -- "${GIT_CREDENTIALS_DIR}"
 
         # workaround for https://github.com/hashicorp/terraform/issues/28490
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@v4.1.0
         with:
           go-version: '1.16.15'
 
@@ -326,10 +326,10 @@ jobs:
     if: inputs.trivy-job-enabled
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
 
       - name: Configure Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v4.7.1
         with:
           python-version: 3.11
 
@@ -426,7 +426,7 @@ jobs:
     if: inputs.trivy-sbom-enabled
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
       - name: Submit SBOM results to Dependency Snapshots
         uses: aquasecurity/trivy-action@0.13.1
         with:
@@ -454,11 +454,11 @@ jobs:
           terraform_docs_token=$(jq -r .token <<<$token)
           echo "terraform_docs_token=$terraform_docs_token" >> "$GITHUB_OUTPUT"
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
         with:
           ref: "${{ github.head_ref }}"
           token: ${{ steps.credentials.outputs.terraform_docs_token }}
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v4.7.1
       - name: Get workflow ref
         id: workflow_tag
         shell: bash
@@ -481,7 +481,7 @@ jobs:
           cat $GITHUB_OUTPUT
       - name: Checkout workflow
         id: checkout_workflow
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
         with:
           repository: nrkno/github-workflow-terraform-config
           ref: ${{ steps.workflow_tag.outputs.workflow_tag }}