chore: pinned gh actions to git tags and upgraded docker build image

ozangulle · Feb 21, 2025 · 1008ab5 · 1008ab5
1 parent 9de5abf
commit 1008ab5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 7 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -13,30 +13,31 @@ jobs:
     steps:
       -
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@4574d27a4764455b42196d70a065bc6853246a25 # v3.4.0
       -
         name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca  # v3.9.0
       -
         name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96   #v 5.6.1
         with:
           images: ozangulle/plauna
           tags: |
             # set dev tag for master branch
             type=raw,value=dev,enable=${{ github.ref == format('refs/heads/{0}', 'master') }}
-            type=ref,event=branch
+            # do not make a tag for 'master' branch
+            type=ref,event=branch,enable=${{ github.ref != format('refs/heads/{0}', 'master') }}
             type=ref,event=tag
       -
         name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567   #v 3.3.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       -
         name: Build and push
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@0adf9959216b96bec444f325f1e493d4aa344497   # v6.14.0
         with:
           push: true
           platforms: linux/amd64,linux/arm64

diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM clojure:temurin-23-tools-deps-1.12.0.1479-bookworm-slim as build
+FROM clojure:temurin-23-tools-deps-bookworm-slim as build
 COPY . /usr/src/app/
 WORKDIR /usr/src/app
 RUN clojure -T:build uber