# ══════════════════════════════════════════════════════════════════
#  BREAKING CHANGE? BUMP THE MAJOR IN cue/cluster/cluster.cue
# ══════════════════════════════════════════════════════════════════
# Everything pinning `@v1` gets this the moment it publishes. A change
# a consumer cannot absorb needs a new major, or it breaks them.
# ══════════════════════════════════════════════════════════════════

name: pin-digest
description: Open a pull request moving every action's pinned toolbox digest to a newly built image.

inputs:
  image:
    description: The image to pin, as name@sha256:digest. Pass build-image's `image` output.
    required: true

runs:
  using: docker

  # By digest, like every other action. This one runs in the image it is about
  # to replace, which is what makes it work at all.
  image: docker://gitea.512.dev/ci/toolbox@sha256:a891c4f9458f8ddc2ebf8cfd1c659cc29d321f1688cd0e3d7b1fa40dffa5582f

  entrypoint: /usr/local/lib/actions/pin-digest.sh
  env:
    PLUGIN_IMAGE: ${{ inputs.image }}