fix: update ref for all internal Actions (slsa-framework#464)

* update * update * update
ramonpetgrave64 · Jul 1, 2022 · 49e648a · 49e648a
1 parent 1b4ebe8
commit 49e648a
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 17 deletions.
diff --git a/.github/actions/generate-builder/action.yml b/.github/actions/generate-builder/action.yml
@@ -34,7 +34,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout the Go builder repository
-      uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@fe4b511143bc6fb575303b60d4361decbe5a2df3
+      uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@1b4ebe8029b40670c71aae9b9c88be486beb6b49
       with:
         repository: "${{ inputs.repository }}"
         ref: "${{ inputs.ref }}"
@@ -52,7 +52,7 @@ runs:
       run: ./.github/actions/generate-builder/generate-builder.sh
 
     - name: Compute sha256 of builder
-      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@fe4b511143bc6fb575303b60d4361decbe5a2df3
+      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@1b4ebe8029b40670c71aae9b9c88be486beb6b49
       id: compute
       with:
         path: "${{ inputs.binary }}"
diff --git a/.github/actions/secure-download-artifact/action.yml b/.github/actions/secure-download-artifact/action.yml
@@ -24,7 +24,7 @@ runs:
 
     - name: Compute the hash
       id: compute
-      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@fe4b511143bc6fb575303b60d4361decbe5a2df3
+      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@1b4ebe8029b40670c71aae9b9c88be486beb6b49
       with:
         path: "${{ inputs.name }}"
 

diff --git a/.github/actions/secure-upload-artifact/action.yml b/.github/actions/secure-upload-artifact/action.yml
@@ -14,7 +14,7 @@ runs:
   steps:
     - name: Compute binary hash
       id: compute-digest
-      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@fe4b511143bc6fb575303b60d4361decbe5a2df3
+      uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@1b4ebe8029b40670c71aae9b9c88be486beb6b49
       with:
         path: "${{ inputs.path }}"
 

diff --git a/.github/workflows/builder_go_slsa3.yml b/.github/workflows/builder_go_slsa3.yml
@@ -81,7 +81,7 @@ jobs:
     steps:
       - name: Detect the builder ref
         id: detect
-        uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@d995948e8d53cc639c0d3ef69db31dbc243519c4
+        uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@d995948e8d53cc639c0d3ef69db31dbc243519c4 # v1.1.1
 
   ###################################################################
   #                                                                 #
@@ -96,7 +96,7 @@ jobs:
     steps:
       - name: Generate builder
         id: generate
-        uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           repository: "${{ needs.detect-env.outputs.repository }}"
           ref: "${{ needs.detect-env.outputs.ref }}"
@@ -128,12 +128,12 @@ jobs:
     needs: builder
     steps:
       - name: Checkout the Go repository
-        uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           go-version: ${{ inputs.go-version }}
 
       - name: Download builder
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ env.BUILDER_BINARY }}"
           sha256: "${{ needs.builder.outputs.go-builder-sha256 }}"
@@ -165,12 +165,12 @@ jobs:
     needs: [builder, build-dry]
     steps:
       - name: Checkout the Go repository
-        uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           go-version: ${{ inputs.go-version }}
 
       - name: Download builder
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ env.BUILDER_BINARY }}"
           sha256: "${{ needs.builder.outputs.go-builder-sha256 }}"
@@ -215,7 +215,7 @@ jobs:
 
       - name: Upload generated binary
         id: upload
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           path: "${{ needs.build-dry.outputs.go-binary-name }}"
 
@@ -235,7 +235,7 @@ jobs:
       go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
     steps:
       - name: Download builder
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ env.BUILDER_BINARY }}"
           sha256: "${{ needs.builder.outputs.go-builder-sha256 }}"
@@ -286,13 +286,13 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
     steps:
       - name: Download binary
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ needs.build-dry.outputs.go-binary-name }}"
           sha256: "${{ needs.builder.outputs.go-builder-sha256 }}"
 
       - name: Download provenance
-        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ needs.provenance.outputs.go-provenance-name }}"
           sha256: "${{ needs.provenance.outputs.go-provenance-sha256 }}"

diff --git a/.github/workflows/generator_generic_slsa3.yml b/.github/workflows/generator_generic_slsa3.yml
@@ -93,7 +93,7 @@ jobs:
       actions: read
     steps:
       - name: Generate builder
-        uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           repository: "${{ needs.detect-env.outputs.repository }}"
           ref: "${{ needs.detect-env.outputs.ref }}"
@@ -141,7 +141,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/') && inputs.upload-to-release == true
     steps:
       - name: Download the provenance
-        uses: slsa-framework/slsa-github-generator/.github/actions/download-artifact@b35443006ca16949bd3f9abd3e76430516cde3ce
+        uses: slsa-framework/slsa-github-generator/.github/actions/download-artifact@1b4ebe8029b40670c71aae9b9c88be486beb6b49
         with:
           name: "${{ needs.generator.outputs.attestation-name }}"
           sha256: "${{ needs.generator.outputs.attestation-sha256 }}"

diff --git a/.github/workflows/pre-submit.e2e.generic.default.yml b/.github/workflows/pre-submit.e2e.generic.default.yml
@@ -1,7 +1,6 @@
 name: pre-submit e2e generic default
 
 on:
-  # TODO(github.com/slsa-framework/slsa-github-generator/issues/452): restore pre-submit
   # pull_request:
   #   branches: [main]
   workflow_dispatch: