From 31ceb0fe054b917506be7c8ad287de7e0a42ae27 Mon Sep 17 00:00:00 2001
From: cpanato <ctadeu@gmail.com>
Date: Wed, 11 Oct 2023 17:32:03 +0200
Subject: [PATCH] fix checkout order

Signed-off-by: cpanato <ctadeu@gmail.com>
---
 .github/workflows/kind-e2e.yaml                 | 4 ++--
 .github/workflows/modules-integration-test.yaml | 4 ++--
 .github/workflows/sbom.yaml                     | 3 ++-
 .github/workflows/style.yaml                    | 6 +++---
 .github/workflows/verify.yaml                   | 4 +++-
 5 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml
index fc253af8ad..7de48c095e 100644
--- a/.github/workflows/kind-e2e.yaml
+++ b/.github/workflows/kind-e2e.yaml
@@ -19,13 +19,13 @@ jobs:
       KO_DOCKER_REPO: registry.local:5000/ko
 
     steps:
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
     - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
       with:
         go-version-file: 'go.mod'
         check-latest: true
 
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
-
     - name: Install ko
       run: go install ./
 
diff --git a/.github/workflows/modules-integration-test.yaml b/.github/workflows/modules-integration-test.yaml
index 8e7eec735b..68e3ecc2bb 100644
--- a/.github/workflows/modules-integration-test.yaml
+++ b/.github/workflows/modules-integration-test.yaml
@@ -16,13 +16,13 @@ jobs:
 
     runs-on: 'ubuntu-latest'
     steps:
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
       - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version: ${{ matrix.go-version }}
           check-latest: true
 
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
-
       - env:
           GOPATH: does not matter
         run: ./integration_test.sh
diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml
index 906fbfb6aa..21db946a60 100644
--- a/.github/workflows/sbom.yaml
+++ b/.github/workflows/sbom.yaml
@@ -81,13 +81,14 @@ jobs:
       KO_DOCKER_REPO: localhost:1338
 
     steps:
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
       - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version-file: 'go.mod'
           check-latest: true
       - uses: chainguard-dev/actions/setup-registry@main
       - uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - name: Install SPDX Tools
         run: |
diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml
index d54eb37883..e2cc96f024 100644
--- a/.github/workflows/style.yaml
+++ b/.github/workflows/style.yaml
@@ -36,15 +36,15 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Check out code
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
       - name: Set up Go
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version-file: 'go.mod'
           check-latest: true
 
-      - name: Check out code
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
-
       - uses: chainguard-dev/actions/trailing-space@d886686603afb809f7ef9b734b333e20b7ce5cda
         if: ${{ always() }}
 
diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml
index 2719fb956b..2f8d073e78 100644
--- a/.github/workflows/verify.yaml
+++ b/.github/workflows/verify.yaml
@@ -10,11 +10,13 @@ jobs:
     name: Verify Codegen
     runs-on: ubuntu-latest
     steps:
+    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
     - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
       with:
         go-version-file: 'go.mod'
         check-latest: true
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
     - name: Verify
       run: ./hack/presubmit.sh