mirror of
https://github.com/renovatebot/renovate.git
synced 2025-01-14 16:46:25 +00:00
26 lines
736 B
Markdown
26 lines
736 B
Markdown
The `github-actions` manager extracts dependencies from GitHub Actions workflow and workflow template files.
|
|
|
|
If you like to use digest pinning but want to follow the action version tag, you can use the following sample:
|
|
|
|
```yaml
|
|
name: build
|
|
|
|
on: [push]
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@af513c7a016048ae468971c52ed77d9562c7c819 # renovate: tag=v1.0.0
|
|
```
|
|
|
|
Renovate will update the commit SHA but follow the GitHub tag you specified.
|
|
Renovate can update digests that use SHA1 and SHA256 algorithms.
|
|
|
|
If you want to automatically pin action digests add the `helpers:pinGitHubActionDigests` preset to the `extends` array:
|
|
|
|
```json
|
|
{
|
|
"extends": ["helpers:pinGitHubActionDigests"]
|
|
}
|
|
```
|