mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-02-05 00:16:07 +00:00
d26df944c0
To improve supply-chain security, reference all GitHub actions using the hash of the released tag. GitHub recommends to do this for third-party actions (https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions). In order to make our CI more deterministic, I opted to do it for all our actions. This means any change to our workflow configuration requires a source code change and thus passing CI on our end. Dependabot will automatically issue PRs for these actions and update the comment with the new version next to them. Resolves: #2497.
17 lines
486 B
YAML
17 lines
486 B
YAML
name: "Setup Node"
|
|
description: "Sets up the correct Node version and installs pnpm"
|
|
inputs:
|
|
node-version:
|
|
description: "Version of nodejs to install"
|
|
required: false
|
|
default: "20"
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
- uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
|
|
with:
|
|
version: 9.3
|
|
- uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
|
|
with:
|
|
node-version: ${{ inputs.node-version }}
|