nca-build-docker-image: renovate github actions to build images and c…

…hart
netceteragroup · Jan 22, 2025 · d656c8c · d656c8c
1 parent 85349a4
commit d656c8c
Showing 1 changed file with 13 additions and 11 deletions.
diff --git a/.github/workflows/nca-build-docker-image.yml b/.github/workflows/nca-build-docker-image.yml
@@ -91,7 +91,9 @@ jobs:
           echo packaging Helm chart into ${{ env.NCA_HELM_BRANCH }} branch
 
       - name: checkout the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       - name: Set 8.8.8.8 as dns server
         run: |
@@ -101,18 +103,18 @@ jobs:
           sudo systemctl restart systemd-resolved
 
       - name: login to Docker repository
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ${{ env.DD_REGISTRY }}
           username: ${{ secrets.NCA_REPO_USERNAME }}
           password: ${{ secrets.NCA_REPO_PASSWORD }}
 
       - name: setup Docker buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
 
       - name: cache Docker layers
-        uses: actions/cache@v4
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         env:
           docker-image: ${{ matrix.docker-image }}
         with:
@@ -128,8 +130,9 @@ jobs:
         run: echo "$AD_CERT" > docker/certs/ad-ca.crt
 
       - name: build and push image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
         env:
+          DOCKER_BUILD_CHECKS_ANNOTATIONS: false
           docker-image: ${{ matrix.docker-image }}
         with:
           push: true
@@ -175,14 +178,13 @@ jobs:
           echo packaging Helm chart into ${{ env.NCA_HELM_BRANCH }} branch
 
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
+          persist-credentials: false
           fetch-depth: 0
 
-      - name: install Helm
-        uses: azure/setup-helm@v3
-        with:
-          version: v3.4.0
+      - name: Set up Helm
+        uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -204,7 +206,7 @@ jobs:
 
       - name: create a release
         id: create_release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2.0.9
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_REPOSITORY: netceteragroup/django-DefectDojo