From 86c4261a9680154c02a67f5a3146a86df6377b1a Mon Sep 17 00:00:00 2001
From: krateng <git.noreply@krateng.ch>
Date: Sat, 26 Feb 2022 23:22:55 +0100
Subject: [PATCH] Pinned github actions

---
 .github/workflows/aux.library.pypi.yml     | 6 +++---
 .github/workflows/aux.scrobbler.upload.yml | 2 +-
 .github/workflows/dockerhub.yml            | 8 ++++----
 .github/workflows/pypi.yml                 | 6 +++---
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/aux.library.pypi.yml b/.github/workflows/aux.library.pypi.yml
index 123b843..97841d8 100644
--- a/.github/workflows/aux.library.pypi.yml
+++ b/.github/workflows/aux.library.pypi.yml
@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@7f80679172b057fc5e90d70d197929d454754a5a
         with:
           python-version: '3.x'
 
@@ -30,7 +30,7 @@ jobs:
         run: python -m build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@717ba43cfbb0387f6ce311b169a825772f54d295
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.github/workflows/aux.scrobbler.upload.yml b/.github/workflows/aux.scrobbler.upload.yml
index 528ee9b..d65cf6d 100644
--- a/.github/workflows/aux.scrobbler.upload.yml
+++ b/.github/workflows/aux.scrobbler.upload.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push Extension to Web Store
-        uses: Klemensas/chrome-extension-upload-action@$VERSION
+        uses: Klemensas/chrome-extension-upload-action@1e8ede84548583abf1a2a495f4242c4c51539337
         with:
           refresh-token: '${{ secrets.GOOGLE_REFRESHTOKEN }}'
           client-id: '${{ secrets.GOOGLE_CLIENTID }}'
diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml
index e81bc6d..680d121 100644
--- a/.github/workflows/dockerhub.yml
+++ b/.github/workflows/dockerhub.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
 
       - name: Log in to Docker Hub
         if: github.event_name != 'pull_request'
@@ -22,7 +22,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@e5622373a38e60fb6d795a4421e56882f2d7a681
         with:
           images: krateng/maloja
           # generate Docker tags based on the following events/attributes
@@ -32,7 +32,7 @@ jobs:
             latest=true
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@7f9d37fa544684fb73bfe4835ed7214c255ce02b
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
@@ -40,7 +40,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Update Readme and short description
-        uses: peter-evans/dockerhub-description@v2
+        uses: peter-evans/dockerhub-description@616d1b63e806b630b975af3b4fe3304307b20f40
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PASSWORD }}
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index 67fd36a..f067ea1 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@7f80679172b057fc5e90d70d197929d454754a5a
         with:
           python-version: '3.x'
 
@@ -25,7 +25,7 @@ jobs:
         run: python -m build
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@717ba43cfbb0387f6ce311b169a825772f54d295
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}