chore(deps): pin dependencies in .github/workflows/scheduled_job.yaml

coreruleset · May 15, 2024 · 5f516df · 5f516df
1 parent 73c942f
commit 5f516df
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/scheduled_job.yaml b/.github/workflows/scheduled_job.yaml
@@ -20,9 +20,9 @@ jobs:
     runs-on: ubuntu-latest
     services:
       apache:
-        image: "httpd:2.4"
+        image: "httpd:2.4@sha256:43c7661a3243c04b0955c81ac994ea13a1d8a1e53c15023a7b3cd5e8bb25de3c"
       waf:
-        image: "owasp/modsecurity-crs:4-apache-202404131004"
+        image: "owasp/modsecurity-crs:4-apache-202404131004@sha256:9c20dd4756378de04c3587911efdf37c15614403c0540e008f16ca1cdbc63cba"
         ports:
           - 8080:8080
         env:
@@ -39,12 +39,12 @@ jobs:
           flags: "-t http/cves -type http -stats -ni -sresp"
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: montudor/action-zip@v1
+      - uses: montudor/action-zip@a8e75c9faefcd80fac3baf53ef40b9b119d5b702 # v1
         with:
           args: zip -qq -r output.zip output
 
       - name: GitHub Workflow artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         with:
           name: output
           path: output.zip