From: Pablo Zmdl <redacted>
Date: Thu, 17 Apr 2025 12:17:10 +0000 (+0200)
Subject: Merge pull request #328 from roundcube/workflow-pin-commits
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=a62e4b6f483fccd035dd9d4db71e85ca1bf4d4a0;p=roundcube-roundcubemail-docker.git

Merge pull request #328 from roundcube/workflow-pin-commits
---

a62e4b6f483fccd035dd9d4db71e85ca1bf4d4a0
diff --cc .github/workflows/build.yml
index b3b746b,73ed242..187b6fa
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@@ -40,25 -38,9 +40,25 @@@ jobs
              test-files: 'fpm-postgres'
              docker-tag: roundcube/roundcubemail:1.6.x-fpm-alpine,roundcube/roundcubemail:1.6.10-fpm-alpine,roundcube/roundcubemail:latest-fpm-alpine
              test-tag: roundcube/roundcubemail:latest-fpm-alpine
 +            target: 'root'
 +          - variant: 'apache'
 +            test-files: 'apache-postgres'
 +            docker-tag: roundcube/roundcubemail:1.6.x-apache-nonroot,roundcube/roundcubemail:1.6.10-apache-nonroot,roundcube/roundcubemail:latest-apache-nonroot,roundcube/roundcubemail:latest-nonroot
 +            test-tag: roundcube/roundcubemail:latest-apache-nonroot
 +            target: 'nonroot'
 +          - variant: 'fpm'
 +            test-files: 'apache-postgres'
 +            docker-tag: roundcube/roundcubemail:1.6.x-fpm-nonroot,roundcube/roundcubemail:1.6.10-fpm-nonroot,roundcube/roundcubemail:latest-fpm-nonroot
 +            test-tag: roundcube/roundcubemail:latest-fpm-nonroot
 +            target: 'nonroot'
 +          - variant: 'fpm-alpine'
 +            test-files: 'apache-postgres'
 +            docker-tag: roundcube/roundcubemail:1.6.x-fpm-alpine-nonroot,roundcube/roundcubemail:1.6.10-fpm-alpine-nonroot,roundcube/roundcubemail:latest-fpm-alpine-nonroot
 +            test-tag: roundcube/roundcubemail:latest-fpm-alpine-nonroot
 +            target: 'nonroot'
      steps:
        - name: Checkout repository
-         uses: actions/checkout@v4
+         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        - name: Get docker hub username
          id: creds
          run: echo '::set-output name=username::${{ secrets.DOCKER_PULL_USERNAME }}'
diff --cc .github/workflows/test.yml
index baa06e9,cc1599d..a946b3c
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@@ -28,23 -26,9 +28,23 @@@ jobs
            - variant: 'fpm-alpine'
              test-files: 'fpm-postgres'
              docker-tag: roundcube/roundcubemail:test-fpm-alpine
 +            target: 'root'
 +          - variant: 'apache'
 +            test-files: 'apache-postgres'
 +            docker-tag: roundcube/roundcubemail:test-apache-nonroot
 +            target: 'nonroot'
 +            http-port: '8000'
 +          - variant: 'fpm'
 +            test-files: 'fpm-postgres'
 +            docker-tag: roundcube/roundcubemail:test-fpm-nonroot
 +            target: 'nonroot'
 +          - variant: 'fpm-alpine'
 +            test-files: 'fpm-postgres'
 +            docker-tag: roundcube/roundcubemail:test-fpm-alpine-nonroot
 +            target: 'nonroot'
      steps:
        - name: Checkout repository
-         uses: actions/checkout@v4
+         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        - name: Get docker hub username
          id: creds
          run: echo '::set-output name=username::${{ secrets.DOCKER_PULL_USERNAME }}'