Skip to content

Commit 796cf0d

Browse files
authored
Merge pull request #61 from Burnett01/release/7.0.1
- Pin @JoshPiper [drinternet/rsync](https://github.com/JoshPiper/rsync-docker) image by SHA-256 hash rather than version. (Immutability) Added via #60 The docker image of this action is now pinned to the specific SHA-256 hash of the version rather than just the version. This means for the latest `drinternet/rsync:v1.4.4` the corresponding hash is `drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234` Check for validation: https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234 With that, usage of this action is even more secure due to a consistent dependency chain of trust, since changes accompanied by a docker image hash are immutable. Thanks to @XComp
2 parents e1c5b90 + b2bc75a commit 796cf0d

File tree

3 files changed

+10
-7
lines changed

3 files changed

+10
-7
lines changed

Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
1-
FROM drinternet/rsync:v1.4.4
1+
# drinternet/rsync@v1.4.4
2+
FROM drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234
23

34
# Copy entrypoint
45
COPY entrypoint.sh /entrypoint.sh

LICENSE

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
MIT License
22

33
Copyright (c) 2019-2022 Contention
4-
Copyright (c) 2019-2022 Burnett01
4+
Copyright (c) 2019-2024 Burnett01
55

66
Permission is hereby granted, free of charge, to any person obtaining a copy
77
of this software and associated documentation files (the "Software"), to deal

README.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,8 @@ This action needs secret variables for the ssh private key of your key pair. The
4040
4141
For simplicity, we are using `DEPLOY_*` as the secret variables throughout the examples.
4242

43+
## Current Version: 7.0.1
44+
4345
## Example usage
4446

4547
Simple:
@@ -57,7 +59,7 @@ jobs:
5759
steps:
5860
- uses: actions/checkout@v3
5961
- name: rsync deployments
60-
uses: burnett01/rsync-deployments@7.0.0
62+
uses: burnett01/rsync-deployments@7.0.1
6163
with:
6264
switches: -avzr --delete
6365
path: src/
@@ -76,7 +78,7 @@ jobs:
7678
steps:
7779
- uses: actions/checkout@v3
7880
- name: rsync deployments
79-
uses: burnett01/rsync-deployments@7.0.0
81+
uses: burnett01/rsync-deployments@7.0.1
8082
with:
8183
switches: -avzr --delete --exclude="" --include="" --filter=""
8284
path: src/
@@ -96,7 +98,7 @@ jobs:
9698
steps:
9799
- uses: actions/checkout@v3
98100
- name: rsync deployments
99-
uses: burnett01/rsync-deployments@7.0.0
101+
uses: burnett01/rsync-deployments@7.0.1
100102
with:
101103
switches: -avzr --delete
102104
path: src/
@@ -116,7 +118,7 @@ jobs:
116118
steps:
117119
- uses: actions/checkout@v3
118120
- name: rsync deployments
119-
uses: burnett01/rsync-deployments@7.0.0
121+
uses: burnett01/rsync-deployments@7.0.1
120122
with:
121123
switches: -avzr --delete
122124
path: src/
@@ -142,7 +144,7 @@ jobs:
142144
steps:
143145
- uses: actions/checkout@v3
144146
- name: rsync deployments
145-
uses: burnett01/rsync-deployments@7.0.0
147+
uses: burnett01/rsync-deployments@7.0.1
146148
with:
147149
switches: -avzr --delete
148150
legacy_allow_rsa_hostkeys: "true"

0 commit comments

Comments
 (0)