diff options
| author | Ivan Gabaldon <igabaldon@inetol.net> | 2025-08-08 11:26:45 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-08-08 11:26:45 +0200 |
| commit | dd170964c70664e2793ceb7e990cf443d9b324ae (patch) | |
| tree | 8f295d2e1fbbe96a9854b47436aab4ac6bceb88d /.github/workflows/data-update.yml | |
| parent | 1f619248b6c03a5954a4f8dd6764578094c8a743 (diff) | |
[mod] ci: strict(er) exec (#5099)
All actions are pulled using the version hash, versions are handled by
dependabot, and we'll have control over which actions get updated.
Replaces Trivy scanner with Docker Scout, we have recently begun analyzing the
images there, and the action will keep us in sync about the problems on GHCS
dashboard.
Diffstat (limited to '.github/workflows/data-update.yml')
| -rw-r--r-- | .github/workflows/data-update.yml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/.github/workflows/data-update.yml b/.github/workflows/data-update.yml index 4deca2ffc..fe55ffaf6 100644 --- a/.github/workflows/data-update.yml +++ b/.github/workflows/data-update.yml @@ -40,17 +40,17 @@ jobs: steps: - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: "${{ env.PYTHON_VERSION }}" - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: "false" - name: Setup cache Python - uses: actions/cache@v4 + uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 with: key: "python-${{ env.PYTHON_VERSION }}-${{ runner.arch }}-${{ hashFiles('./requirements*.txt') }}" restore-keys: "python-${{ env.PYTHON_VERSION }}-${{ runner.arch }}-" @@ -64,7 +64,7 @@ jobs: - name: Create PR id: cpr - uses: peter-evans/create-pull-request@v7 + uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8 with: author: "searxng-bot <searxng-bot@users.noreply.github.com>" committer: "searxng-bot <searxng-bot@users.noreply.github.com>" |