mirror of
https://github.com/renovatebot/renovate.git
synced 2026-11-07 20:46:36 +00:00
HonkingGoose
43 lines
1.1 KiB
Markdown
43 lines
1.1 KiB
Markdown
The `github-actions` manager extracts dependencies from GitHub Actions workflow and workflow template files.
|
|
It can also be used for Gitea and Forgejo Actions workflows as such are compatible with GitHub Actions workflows.
|
|
|
|
If you like to use digest pinning but want to follow the action version tag, you can use the following sample:
|
|
|
|
```yaml
|
|
name: build
|
|
|
|
on: [push]
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
|
|
```
|
|
|
|
Renovate will update the commit SHA but follow the GitHub tag you specified.
|
|
Renovate can update digests that use SHA1 and SHA256 algorithms.
|
|
|
|
If you want to automatically pin action digests add the `helpers:pinGitHubActionDigests` preset to the `extends` array:
|
|
|
|
```json
|
|
{
|
|
"extends": ["helpers:pinGitHubActionDigests"]
|
|
}
|
|
```
|
|
|
|
Renovate ignores any GitHub runners which are configured in variables.
|
|
For example, Renovate ignores the runner configured in the `RUNNER` variable:
|
|
|
|
```yaml
|
|
name: build
|
|
on: [push]
|
|
|
|
env:
|
|
RUNNER: ubuntu-20.04
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ${{ env.RUNNER }}
|
|
```
|