diff --git a/.github/workflows/conventional-commit-lint.yml b/.github/workflows/conventional-commit-lint.yml index 1ac733f84..56c7bb1fb 100644 --- a/.github/workflows/conventional-commit-lint.yml +++ b/.github/workflows/conventional-commit-lint.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Setup Node.js uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 diff --git a/.github/workflows/request-ecs-service-to-use-new-image/action.yml b/.github/workflows/request-ecs-service-to-use-new-image/action.yml index d09bb86d6..266e1ac46 100644 --- a/.github/workflows/request-ecs-service-to-use-new-image/action.yml +++ b/.github/workflows/request-ecs-service-to-use-new-image/action.yml @@ -46,7 +46,7 @@ runs: image: "${{ steps.login-ecr-staging.outputs.registry }}/${{ inputs.image-tag }}" - name: Create the new ECS task definition - uses: aws-actions/amazon-ecs-deploy-task-definition@4482193dd766379c66473482bbc77299b053ec94 # v2.1.0 + uses: aws-actions/amazon-ecs-deploy-task-definition@06703f1be1bf4df74075222214d21baae72cf3a1 # v2.1.1 with: task-definition: ${{ steps.task-def.outputs.task-definition }} cluster: ${{ inputs.ecs-cluster-name }} diff --git a/.github/workflows/terraform-security-scan.yml b/.github/workflows/terraform-security-scan.yml index 29ace6d85..a7d377c67 100644 --- a/.github/workflows/terraform-security-scan.yml +++ b/.github/workflows/terraform-security-scan.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Checkov security scan uses: bridgecrewio/checkov-action@097919de4f8058fb4478275f36e6708d12a9f53a # latest as of December 2023 diff --git a/.github/workflows/terraform-variable-check.yml b/.github/workflows/terraform-variable-check.yml index 47cfdc522..37dfd1f82 100644 --- a/.github/workflows/terraform-variable-check.yml +++ b/.github/workflows/terraform-variable-check.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Check Terraform variables are defined correctly run: | diff --git a/.github/workflows/terraform-version-check.yml b/.github/workflows/terraform-version-check.yml index c142f660a..09d1943a0 100644 --- a/.github/workflows/terraform-version-check.yml +++ b/.github/workflows/terraform-version-check.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get latest versions id: latest diff --git a/.github/workflows/terragrunt-apply-production.yml b/.github/workflows/terragrunt-apply-production.yml index 99033f941..790b01699 100644 --- a/.github/workflows/terragrunt-apply-production.yml +++ b/.github/workflows/terragrunt-apply-production.yml @@ -58,7 +58,7 @@ jobs: version: ${{ steps.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get version to deploy id: get-version @@ -73,7 +73,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} - name: Generate matrix @@ -92,7 +92,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -122,7 +122,7 @@ jobs: image: ${{ fromJSON(needs.generate-lambda-functions-matrix.outputs.lambda-functions-matrix) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -148,7 +148,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -175,7 +175,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -283,7 +283,7 @@ jobs: image: ${{ fromJSON(needs.generate-lambda-functions-matrix.outputs.lambda-functions-matrix) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -304,7 +304,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} diff --git a/.github/workflows/terragrunt-apply-staging.yml b/.github/workflows/terragrunt-apply-staging.yml index 8d07260ac..16eb7a783 100644 --- a/.github/workflows/terragrunt-apply-staging.yml +++ b/.github/workflows/terragrunt-apply-staging.yml @@ -63,7 +63,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Setup terraform tools uses: cds-snc/terraform-tools-setup@v1 @@ -86,7 +86,7 @@ jobs: lambda-to-rebuild: ${{ steps.filter.outputs.changes }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Filter id: filter @@ -101,7 +101,7 @@ jobs: changes: ${{ steps.filter.outputs.changes }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Filter id: filter @@ -122,7 +122,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build Lambda images uses: ./.github/workflows/build-lambda-images @@ -145,7 +145,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build IdP image working-directory: idp @@ -168,7 +168,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Setup terraform tools uses: cds-snc/terraform-tools-setup@v1 @@ -278,7 +278,7 @@ jobs: image: ${{ fromJSON(needs.detect-lambda-changes.outputs.lambda-to-rebuild) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Request Lambda functions to use new image uses: ./.github/workflows/request-lambda-functions-to-use-new-image @@ -295,7 +295,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Update IdP ESC service to use new image uses: ./.github/workflows/request-ecs-service-to-use-new-image diff --git a/.github/workflows/terragrunt-plan-all-staging.yml b/.github/workflows/terragrunt-plan-all-staging.yml index 77f6fc2f0..51f937edf 100644 --- a/.github/workflows/terragrunt-plan-all-staging.yml +++ b/.github/workflows/terragrunt-plan-all-staging.yml @@ -54,7 +54,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 # Setup Terraform, Terragrunt, and Conftest - name: Setup terraform tools diff --git a/.github/workflows/terragrunt-plan-production-warn-release-exists.yml b/.github/workflows/terragrunt-plan-production-warn-release-exists.yml index 79b7639bb..e0a6cf8d7 100644 --- a/.github/workflows/terragrunt-plan-production-warn-release-exists.yml +++ b/.github/workflows/terragrunt-plan-production-warn-release-exists.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get version run: echo "version=v$(cat version.txt)" >> $GITHUB_ENV diff --git a/.github/workflows/terragrunt-plan-production.yml b/.github/workflows/terragrunt-plan-production.yml index e03638aff..ade043c35 100644 --- a/.github/workflows/terragrunt-plan-production.yml +++ b/.github/workflows/terragrunt-plan-production.yml @@ -60,7 +60,7 @@ jobs: version: ${{ steps.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get version to deploy id: get-version @@ -75,7 +75,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} - name: Generate matrix @@ -97,7 +97,7 @@ jobs: image: ${{ fromJSON(needs.generate-lambda-functions-matrix.outputs.lambda-functions-matrix) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -118,7 +118,7 @@ jobs: image: ${{ fromJSON(needs.generate-lambda-functions-matrix.outputs.lambda-functions-matrix) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -135,7 +135,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} @@ -151,7 +151,7 @@ jobs: VERSION: ${{ needs.get-version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.VERSION }} diff --git a/.github/workflows/terragrunt-plan-staging.yml b/.github/workflows/terragrunt-plan-staging.yml index f43a314a9..5128c7144 100644 --- a/.github/workflows/terragrunt-plan-staging.yml +++ b/.github/workflows/terragrunt-plan-staging.yml @@ -67,7 +67,7 @@ jobs: lambda-to-rebuild: ${{ steps.filter.outputs.changes }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Filter id: filter @@ -85,7 +85,7 @@ jobs: image: ${{ fromJSON(needs.detect-lambda-changes.outputs.lambda-to-rebuild) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Test Lambda code uses: ./.github/workflows/test-lambda-code @@ -103,7 +103,7 @@ jobs: image: ${{ fromJSON(needs.detect-lambda-changes.outputs.lambda-to-rebuild) }} steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build Lambda images uses: ./.github/workflows/build-lambda-images @@ -116,7 +116,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build IdP image working-directory: idp @@ -128,7 +128,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 # Setup Terraform, Terragrunt, and Conftest - name: Setup terraform tools