Skip to content

Commit 9f39d00

Browse files
scraswellscraswell
committed
DX-516: Pin actions to SHA
1 parent 92d55e5 commit 9f39d00

File tree

9 files changed

+29
-29
lines changed

9 files changed

+29
-29
lines changed

‎.github/workflows/build-sample-apps.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,15 @@ jobs:
2121
comment-id: ${{ steps.create-comment.outputs.comment-id }}
2222
steps:
2323
- name: Find Comment
24-
uses: peter-evans/find-comment@v3
24+
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
2525
id: existing-comment
2626
with:
2727
issue-number: ${{ github.event.pull_request.number }}
2828
comment-author: 'github-actions[bot]'
2929
body-includes: <!-- sample app builds -->
3030

3131
- name: Create or update comment
32-
uses: peter-evans/create-or-update-comment@v4
32+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
3333
id: create-comment
3434
with:
3535
comment-id: ${{ steps.existing-comment.outputs.comment-id }}

‎.github/workflows/deploy-sdk.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
- uses: actions/checkout@v4
2323
# If using sd on macos, "brew install" works great. for Linux, this is the recommended way.
2424
- name: Install sd CLI to use later in the workflow
25-
uses: kenji-miyake/setup-sd@v2
25+
uses: kenji-miyake/setup-sd@08c14e27d65a1c215342ef00c81583ae67f4c5ef # v2.0.0
2626

2727
# Setup Android SDK as it's needed to generate the SDK size report.
2828
- name: Setup Android SDK
@@ -48,7 +48,7 @@ jobs:
4848
# 2. Updates metadata files. Such as updating the version number in package.json and adding entries to CHANGELOG.md file.
4949
# 3. Create git tag and push it to github.
5050
- name: Deploy git tag via semantic-release
51-
uses: cycjimmy/semantic-release-action@v4
51+
uses: cycjimmy/semantic-release-action@0a51e81a6baff2acad3ee88f4121c589c73d0f0e # v4.2.0
5252
id: semantic-release
5353
with:
5454
dry_run: false
@@ -62,7 +62,7 @@ jobs:
6262
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6363

6464
- name: Notify team of git tag being created
65-
uses: slackapi/slack-github-action@v2.0.0
65+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CC4B:17C27B:F88E98:1EEBC0A:67EC59D1 and timestamp 2025-04-01 21:25:37 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
6666
if: steps.semantic-release.outputs.new_release_published == 'true' # only run if a git tag was made.
6767
with:
6868
webhook: ${{ secrets.SLACK_NOTIFY_RELEASES_WEBHOOK_URL }}
@@ -101,15 +101,15 @@ jobs:
101101
SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
102102

103103
- name: Send Velocity Deployment
104-
uses: codeclimate/velocity-deploy-action@v1.0.0
104+
uses: codeclimate/velocity-deploy-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CC60:2AEB7E:F728B1:1ECAC7B:67EC59D2 and timestamp 2025-04-01 21:25:38 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v1.0.0
105105
if: steps.semantic-release.outputs.new_release_published == 'true' # only run if a git tag was made.
106106
with:
107107
token: ${{ secrets.VELOCITY_DEPLOYMENT_TOKEN }}
108108
version: ${{ steps.semantic-release.outputs.new_release_version }}
109109
environment: production
110110

111111
- name: Notify team of failure
112-
uses: slackapi/slack-github-action@v2.0.0
112+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CC76:1659EB:F5CC21:1E97DB0:67EC59D3 and timestamp 2025-04-01 21:25:39 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
113113
if: ${{ failure() }} # only run this if any previous step failed
114114
with:
115115
webhook: ${{ secrets.SLACK_NOTIFY_RELEASES_WEBHOOK_URL }}
@@ -169,7 +169,7 @@ jobs:
169169
SONATYPE_STAGING_PROFILE_ID: ${{ secrets.SONATYPE_STAGING_PROFILE_ID }}
170170

171171
- name: Notify team of successful deployment
172-
uses: slackapi/slack-github-action@v2.0.0
172+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CC8C:10531D:FD1F18:1F81642:67EC59D3 and timestamp 2025-04-01 21:25:39 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
173173
if: ${{ success() }}
174174
with:
175175
webhook: ${{ secrets.SLACK_NOTIFY_RELEASES_WEBHOOK_URL }}
@@ -208,7 +208,7 @@ jobs:
208208
SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
209209

210210
- name: Notify team of failure
211-
uses: slackapi/slack-github-action@v2.0.0
211+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CC9F:26D8FF:1567712:2A97B53:67EC59D4 and timestamp 2025-04-01 21:25:40 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
212212
if: ${{ failure() }} # only run this if any previous step failed
213213
with:
214214
webhook: ${{ secrets.SLACK_NOTIFY_RELEASES_WEBHOOK_URL }}

‎.github/workflows/lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
run: ./gradlew :${{ matrix.module }}:lintDebug
1818

1919
- name: Parse lint results (${{ matrix.module }})
20-
uses: yutailang0119/action-android-lint@v4.0.0
20+
uses: yutailang0119/action-android-lint@bd0b5a7d2cc453d16080b90e2a975d4af4aa9588 # v4.0.0
2121
with:
2222
report-path: ${{ matrix.module }}/build/reports/lint-results-debug.xml
2323
if: ${{ always() }} # if running tests fails, we still want to parse the test results

‎.github/workflows/manual-deployment.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
SONATYPE_STAGING_PROFILE_ID: ${{ secrets.SONATYPE_STAGING_PROFILE_ID }}
3737

3838
- name: Notify team of successful deployment
39-
uses: slackapi/slack-github-action@v2.0.0
39+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD7A:259E16:14D4764:297C1B8:67EC59DE and timestamp 2025-04-01 21:25:50 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
4040
if: ${{ success() }}
4141
with:
4242
payload: |
@@ -69,7 +69,7 @@ jobs:
6969
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFY_RELEASES_WEBHOOK_URL }}
7070
SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
7171
- name: Notify team of failure
72-
uses: slackapi/slack-github-action@v2.0.0
72+
uses: slackapi/slack-github-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD7E:C5F06:15885CD:2ADC028:67EC59DE and timestamp 2025-04-01 21:25:50 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2.0.0
7373
if: ${{ failure() }}
7474
with:
7575
payload: |

‎.github/workflows/pr-helper.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,4 @@ jobs:
1010
permissions:
1111
pull-requests: write # to comment on PRs
1212
steps:
13-
- uses: levibostian/action-conventional-pr-linter@v4
13+
- uses: levibostian/action-conventional-pr-linter@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD83:17C27B:F8BD1F:1EF18FC:67EC59DF and timestamp 2025-04-01 21:25:51 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v4

‎.github/workflows/reusable_build_sample_apps.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -80,10 +80,10 @@ jobs:
8080
# CLI to replace strings in files. The CLI recommends using `cargo install` which is slow. This Action is fast because it downloads pre-built binaries.
8181
# If using sd on macos, "brew install" works great. for Linux, this is the recommended way.
8282
- name: Install sd CLI to use later in the workflow
83-
uses: kenji-miyake/setup-sd@v2
83+
uses: kenji-miyake/setup-sd@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD59:163AE4:14B5D7E:2944614:67EC59DB and timestamp 2025-04-01 21:25:47 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2
8484

8585
- name: Install tools from Gemfile (ruby language) used for building our apps with
86-
uses: ruby/setup-ruby@v1
86+
uses: ruby/setup-ruby@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD61:C5F06:1587B6E:2ADAC07:67EC59DB and timestamp 2025-04-01 21:25:47 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v1
8787
with:
8888
ruby-version: '3.0'
8989
bundler-cache: true # cache tools to make builds faster in future
@@ -137,7 +137,7 @@ jobs:
137137
138138
- name: Deploy build via Fastlane
139139
if: ${{ ! (inputs.use_latest_sdk_version == true && matrix.sample-app == 'kotlin_compose') }}
140-
uses: maierj/fastlane-action@v3.1.0
140+
uses: maierj/fastlane-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD68:1F2304:1066136:20A3749:67EC59DC and timestamp 2025-04-01 21:25:48 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v3.1.0
141141
with:
142142
lane: ${{ inputs.use_latest_sdk_version == true && 'android build_sample_app_for_sdk_release' || 'android build' }}
143143
subdirectory: "samples/${{ matrix.sample-app }}"
@@ -176,7 +176,7 @@ jobs:
176176

177177
- name: Update sample builds PR comment with build information
178178
if: ${{ github.event_name == 'pull_request' }}
179-
uses: peter-evans/create-or-update-comment@v4
179+
uses: peter-evans/create-or-update-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD6E:163AE4:14B6307:29450EF:67EC59DC and timestamp 2025-04-01 21:25:49 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v4
180180
with:
181181
comment-id: ${{ needs.update-pr-comment.outputs.comment-id }}
182182
issue-number: ${{ github.event.pull_request.number }}
@@ -187,7 +187,7 @@ jobs:
187187

188188
- name: Update sample builds PR comment with build failure message
189189
if: ${{ failure() }}
190-
uses: peter-evans/create-or-update-comment@v4
190+
uses: peter-evans/create-or-update-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD74:1DDD0E:14CC374:296AB57:67EC59DD and timestamp 2025-04-01 21:25:49 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v4
191191
with:
192192
comment-id: ${{ needs.update-pr-comment.outputs.comment-id }}
193193
issue-number: ${{ github.event.pull_request.number }}

‎.github/workflows/sdk-binary-size.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,15 +49,15 @@ jobs:
4949
IS_DEVELOPMENT: 'true'
5050

5151
- name: Find old comment to update comment for
52-
uses: peter-evans/find-comment@v3
52+
uses: peter-evans/find-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD44:1659EB:F5E221:1E9A95F:67EC59DA and timestamp 2025-04-01 21:25:46 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v3
5353
id: find-previous-comment
5454
with:
5555
issue-number: ${{ github.event.pull_request.number }}
5656
comment-author: 'github-actions[bot]'
5757
body-includes: SDK Binary Size Comparison
5858

5959
- name: Add or Update PR Comment with SDK Size Comparison Report
60-
uses: peter-evans/create-or-update-comment@v4
60+
uses: peter-evans/create-or-update-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD50:296AAC:15A7601:2B134EA:67EC59DA and timestamp 2025-04-01 21:25:46 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v4
6161
with:
6262
comment-id: ${{ steps.find-previous-comment.outputs.comment-id }}
6363
issue-number: ${{ github.event.pull_request.number }}

‎.github/workflows/snapshot-release.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,15 +37,15 @@ jobs:
3737
SNAPSHOT: true
3838

3939
- name: Find old comment to update comment for
40-
uses: peter-evans/find-comment@v3
40+
uses: peter-evans/find-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CCB3:22D562:FE6269:1FA02AE:67EC59D4 and timestamp 2025-04-01 21:25:40 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v3
4141
id: find-previous-comment
4242
with:
4343
issue-number: ${{ github.event.pull_request.number }}
4444
comment-author: 'github-actions[bot]'
4545
body-includes: Build available to test
4646

4747
- name: Inform pull request on build of SDK available to test
48-
uses: peter-evans/create-or-update-comment@v4
48+
uses: peter-evans/create-or-update-comment@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CCC0:23B698:14D94F0:2986010:67EC59D5 and timestamp 2025-04-01 21:25:41 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v4
4949
with:
5050
comment-id: ${{ steps.find-previous-comment.outputs.comment-id }}
5151
issue-number: ${{ github.event.pull_request.number }}
@@ -103,10 +103,10 @@ jobs:
103103

104104
# If using sd on macos, "brew install" works great. for Linux, this is the recommended way.
105105
- name: Install sd CLI to use later in the workflow
106-
uses: kenji-miyake/setup-sd@v2
106+
uses: kenji-miyake/setup-sd@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CCD1:244897:146D15D:28B38B7:67EC59D6 and timestamp 2025-04-01 21:25:42 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2
107107

108108
- name: Install tools from Gemfile (ruby language) used for building our apps with
109-
uses: ruby/setup-ruby@v1
109+
uses: ruby/setup-ruby@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CCE3:1F34F1:1524D90:2A170A1:67EC59D6 and timestamp 2025-04-01 21:25:42 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v1
110110
with:
111111
ruby-version: '3.0'
112112
bundler-cache: true

‎.github/workflows/test.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,15 +17,15 @@ jobs:
1717
- name: Run unit tests (${{ matrix.module }})
1818
run: ./gradlew :${{ matrix.module }}:runJacocoTestReport
1919
- name: Upload code coverage report
20-
uses: codecov/codecov-action@v5
20+
uses: codecov/codecov-action@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CCF6:1F34F1:152500D:2A1753E:67EC59D7 and timestamp 2025-04-01 21:25:43 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v5
2121
env:
2222
CODECOV_TOKEN: ${{ secrets.CODECOV_UPLOAD_TOKEN }}
2323
with:
2424
fail_ci_if_error: true
2525
verbose: true
2626
files: ./${{ matrix.module }}/build/reports/jacoco/test/jacocoTestReport.xml,./${{ matrix.module }}/build/reports/jacoco/runJacocoTestReport/runJacocoTestReport.xml
2727
- name: Publish test results (${{ matrix.module }})
28-
uses: mikepenz/action-junit-report@v5
28+
uses: mikepenz/action-junit-report@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD08:2AEB7E:F73A74:1ECCFD3:67EC59D7 and timestamp 2025-04-01 21:25:43 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v5
2929
with:
3030
report_paths: '**/build/test-results/test*/TEST-*.xml'
3131
fail_on_failure: true
@@ -71,7 +71,7 @@ jobs:
7171
# Create AVD and generate snapshot for caching
7272
- name: Create AVD and generate snapshot
7373
if: steps.avd-cache.outputs.cache-hit != 'true'
74-
uses: reactivecircus/android-emulator-runner@v2
74+
uses: reactivecircus/android-emulator-runner@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD18:13B624:15BDC03:2B46C87:67EC59D8 and timestamp 2025-04-01 21:25:44 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2
7575
with:
7676
api-level: ${{ matrix.api-level }}
7777
arch: x86_64
@@ -84,7 +84,7 @@ jobs:
8484

8585
# Run the actual tests
8686
- name: Run instrumentation tests
87-
uses: reactivecircus/android-emulator-runner@v2
87+
uses: reactivecircus/android-emulator-runner@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD27:10531D:FD31E8:1F83C17:67EC59D9 and timestamp 2025-04-01 21:25:45 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v2
8888
with:
8989
api-level: ${{ matrix.api-level }}
9090
arch: x86_64
@@ -97,7 +97,7 @@ jobs:
9797
script: ./gradlew :samples:${{ matrix.sample }}:connectedDebugAndroidTest --no-daemon --stacktrace -PuseKsp=true
9898

9999
- name: Publish test results
100-
uses: mikepenz/action-junit-report@v5
100+
uses: mikepenz/action-junit-report@{"message":"API rate limit exceeded for user ID 5253417. If you reach out to GitHub Support for help, please include the request ID CD37:23B698:14DA241:2987ADA:67EC59D9 and timestamp 2025-04-01 21:25:45 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"} # v5
101101
if: always()
102102
with:
103103
report_paths: 'samples/${{ matrix.sample }}/build/outputs/androidTest-results/connected/TEST-*.xml'

0 commit comments

Comments
 (0)