@@ -26,10 +26,10 @@ jobs:
2626 timeout-minutes : 15
2727 steps :
2828 - name : Checkout
29- uses : actions/checkout@v5
29+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
3030
3131 - name : Setup Node.js
32- uses : actions/setup-node@v5
32+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
3333 with :
3434 cache : ' npm'
3535 node-version : ${{ env.NODE_VERSION }}
@@ -53,10 +53,10 @@ jobs:
5353 timeout-minutes : 15
5454 steps :
5555 - name : Checkout
56- uses : actions/checkout@v5
56+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
5757
5858 - name : Setup Node.js
59- uses : actions/setup-node@v5
59+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
6060 with :
6161 cache : ' npm'
6262 node-version : ${{ env.NODE_VERSION }}
@@ -78,10 +78,10 @@ jobs:
7878
7979 steps :
8080 - name : Checkout code
81- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
81+ uses : actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
8282
8383 - name : Install qlty
84- uses : qltysh/qlty-action/install@06730ef41b86b073c3813c0fc07a0c734980ce5d
84+ uses : qltysh/qlty-action/install@a19242102d17e497f437d7466aa01b528537e899
8585
8686 - name : Run qlty check
8787 run : qlty check
@@ -93,12 +93,16 @@ jobs:
9393 name : Build & Test
9494 runs-on : ubuntu-latest
9595 timeout-minutes : 15
96+ permissions :
97+ id-token : write
98+ contents : read
99+ packages : read
96100 steps :
97101 - name : Checkout
98- uses : actions/checkout@v5
102+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
99103
100104 - name : Setup Node.js
101- uses : actions/setup-node@v5
105+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
102106 with :
103107 cache : ' npm'
104108 node-version : ${{ env.NODE_VERSION }}
@@ -119,18 +123,18 @@ jobs:
119123 VSC_JUPYTER_INSTRUMENT_CODE_FOR_COVERAGE : true
120124
121125 - name : Upload coverage to Codecov
122- uses : codecov/codecov-action@v5
126+ uses : codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5
123127 with :
124- token : ${{ secrets.CODECOV_TOKEN }}
128+ use_oidc : true
125129 files : coverage/lcov.info
126130 fail_ci_if_error : true
127131
128132 - name : Upload test results to Codecov
129133 if : ' !cancelled()'
130- uses : codecov/test-results-action@v1
134+ uses : codecov/test-results-action@47f89e9acb64b76debcd5ea40642d25a4adced9f # v1
131135 with :
132- token : ${{ secrets.CODECOV_TOKEN }}
133- files : test-report .xml
136+ use_oidc : true
137+ files : test-results .xml
134138 fail_ci_if_error : true
135139
136140 - name : Check dependencies
@@ -145,10 +149,10 @@ jobs:
145149 runs-on : ubuntu-latest
146150 steps :
147151 - name : Checkout
148- uses : actions/checkout@v5
152+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
149153
150154 - name : Setup Node.js
151- uses : actions/setup-node@v5
155+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
152156 with :
153157 cache : ' npm'
154158 node-version : ${{ env.NODE_VERSION }}
@@ -169,10 +173,10 @@ jobs:
169173 timeout-minutes : 15
170174 steps :
171175 - name : Checkout
172- uses : actions/checkout@v5
176+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
173177
174178 - name : Setup Node.js
175- uses : actions/setup-node@v5
179+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
176180 with :
177181 cache : ' npm'
178182 node-version : ${{ env.NODE_VERSION }}
@@ -193,10 +197,10 @@ jobs:
193197 timeout-minutes : 15
194198 steps :
195199 - name : Checkout
196- uses : actions/checkout@v5
200+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
197201
198202 - name : Setup Node.js
199- uses : actions/setup-node@v5
203+ uses : actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
200204 with :
201205 cache : ' npm'
202206 node-version : ${{ env.NODE_VERSION }}
0 commit comments