ping gh actions

.github/workflows/labeler.yml

@@ -10,4 +10,4 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5

.github/workflows/lint.yml

@@ -6,6 +6,7 @@ on:
   push:
   workflow_dispatch:
 
+
 jobs:
   lint:
     name: pre-commit
@@ -14,12 +15,12 @@ jobs:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
 
-      - uses: terraform-linters/setup-tflint@v4
+      - uses: terraform-linters/setup-tflint@19a52fbac37dacb22a09518e4ef6ee234f2d4987 # v4
         name: Setup TFLint
         with:
           tflint_version: v0.50.3
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
       - run: go install github.com/terraform-docs/[email protected]
 
       - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

.github/workflows/nightly_cleanup.yml

@@ -6,6 +6,7 @@ on:
     - cron: '0 5 * * *'
   workflow_dispatch:
 
+
 env:
   AWS_PROFILE: "infex"
   AWS_REGION: "eu-central-1"
@@ -18,11 +19,11 @@ jobs:
     # indirectly node used by actions
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Import Secrets
         id: secrets
-        uses: hashicorp/vault-action@v3
+        uses: hashicorp/vault-action@d1720f055e0635fd932a1d2a48f87a666a57906c # v3
         with:
           url: ${{ secrets.VAULT_ADDR }}
           method: approle

.github/workflows/tests.yml

@@ -7,6 +7,7 @@ on:
   workflow_dispatch:
   pull_request:
 
+
 env:
   AWS_PROFILE: "infex"
   AWS_REGION: "eu-central-1"
@@ -21,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Check labels
         run: |
@@ -34,27 +35,27 @@ jobs:
 
       - name: Get go.mod details
         if: "!contains(github.event.pull_request.labels.*.name, 'testing-ci-not-necessary')"
-        uses: Eun/go-mod-details@v1
+        uses: Eun/go-mod-details@b719cd324463e2037cf3a0dd1dd6091bdc2730f4 # v1
         id: go-mod-details
         with:
           modfile: ${{ github.workspace }}/test/src/go.mod
 
       - name: Set up Go environment
         if: "!contains(github.event.pull_request.labels.*.name, 'testing-ci-not-necessary')"
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
         with:
           go-version: ${{ steps.go-mod-details.outputs.go_version }}
 
       - name: Set up Terraform (OpenTofu)
         if: "!contains(github.event.pull_request.labels.*.name, 'testing-ci-not-necessary')"
-        uses: opentofu/setup-opentofu@v1
+        uses: opentofu/setup-opentofu@ae80d4ecaab946d8f5ff18397fbf6d0686c6d46a # v1
         with:
           tofu_version: 1.6.2
 
       - name: Import Secrets
         if: "!contains(github.event.pull_request.labels.*.name, 'testing-ci-not-necessary')"
         id: secrets
-        uses: hashicorp/vault-action@v3
+        uses: hashicorp/vault-action@d1720f055e0635fd932a1d2a48f87a666a57906c # v3
         with:
           url: ${{ secrets.VAULT_ADDR }}
           method: approle
@@ -88,7 +89,8 @@ jobs:
           gotestsum --junitfile unit-tests.xml --format pkgname -- -v --timeout=120m -p 1 ./...
 
       - name: Test Summary
-        uses: test-summary/action@v2 # may not work due to https://github.com/test-summary/action/issues/5
+        # may not work due to https://github.com/test-summary/action/issues/5
+        uses: test-summary/action@032c8a9cec6aaa3c20228112cae6ca10a3b29336 # v2
         with:
           paths: "./test/src/unit-tests.xml"
         if: "!contains(github.event.pull_request.labels.*.name, 'testing-ci-not-necessary') && always()"

DEVELOPER.md

@@ -46,4 +46,10 @@ We follow Semantic Versioning (SemVer) guidelines for versioning. Follow these s
    - Publish the new version on GitHub Releases.
    - Tag the release with the version number and include release notes summarizing changes.
 
+## Adding new GH actions
+
+Please pin GitHub action, if you need you can use [pin-github-action](https://github.com/mheap/pin-github-action) cli tool.
+
+---
+
 By following these guidelines, we ensure smooth development iterations, robust testing practices, and clear version management for the Terraform EKS module. Happy coding!