Skip to content

Commit e1bbf0c

Browse files
bupdbupd
committed
chore: pin github actions to SHA with version commits
Signed-off-by: bupd <[email protected]>
1 parent eac4ac9 commit e1bbf0c

File tree

5 files changed

+22
-22
lines changed

5 files changed

+22
-22
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout code
23-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
23+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
2424
with:
2525
submodules: recursive
2626

2727
- name: Install Go
28-
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00
28+
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
2929
with:
3030
go-version-file: go.mod
3131

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,15 +28,15 @@ jobs:
2828

2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
31+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
3232

3333
- name: Initialize CodeQL
34-
uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e
34+
uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
3535
with:
3636
languages: ${{ matrix.language }}
3737

3838
- name: Autobuild
39-
uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e
39+
uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
4040

4141
- name: Perform CodeQL Analysis
42-
uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e
42+
uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8

‎.github/workflows/e2e.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -33,12 +33,12 @@ jobs:
3333
PACKAGE_DIR: modctl-test-package
3434
steps:
3535
- name: Checkout code
36-
uses: actions/checkout@v6
36+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3737
with:
3838
submodules: recursive
3939

4040
- name: Install Go
41-
uses: actions/setup-go@v6
41+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
4242
with:
4343
go-version-file: go.mod
4444
cache-dependency-path: go.sum
@@ -49,7 +49,7 @@ jobs:
4949
5050
- name: Cache Package
5151
id: cache-package
52-
uses: actions/cache@v5
52+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
5353
with:
5454
path: ${{ env.PACKAGE_DIR }}
5555
key: modctl-test-packages
@@ -79,7 +79,7 @@ jobs:
7979
go build -tags "static system_libgit2 enable_libgit2"
8080
8181
- name: Upload modctl
82-
uses: actions/upload-artifact@v6
82+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
8383
with:
8484
name: modctl-artifact
8585
path: modctl
@@ -90,15 +90,15 @@ jobs:
9090
runs-on: ubuntu-latest
9191
steps:
9292
- name: Cache model
93-
uses: actions/cache@v5
93+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
9494
id: cache-model
9595
with:
9696
path: ${{ env.MODEL_DIR }}
9797
key: ${{env.MODEL_DIR}}-${{ env.MODEL }}
9898

9999
- name: Set up Python
100100
if: steps.cache-model.outputs.cache-hit != 'true'
101-
uses: actions/setup-python@v6
101+
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
102102
with:
103103
python-version: "3.10"
104104

@@ -110,7 +110,7 @@ jobs:
110110
hf download ${{ env.MODEL }} --local-dir ${{ env.MODEL_DIR }}
111111
112112
- name: Upload model
113-
uses: actions/upload-artifact@v6
113+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
114114
with:
115115
name: model-artifact
116116
path: ${{ env.MODEL_DIR }}
@@ -122,12 +122,12 @@ jobs:
122122
needs: [build-modctl, download-model]
123123
steps:
124124
- name: Download modctl artifact
125-
uses: actions/download-artifact@v7
125+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
126126
with:
127127
name: modctl-artifact
128128
path: modctl
129129
- name: Download model artifact
130-
uses: actions/download-artifact@v7
130+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
131131
with:
132132
name: model-artifact
133133
path: ${{ env.MODEL_DIR }}

‎.github/workflows/lint.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
timeout-minutes: 30
1717
steps:
1818
- name: Checkout code
19-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
19+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
2020
with:
2121
fetch-depth: '0'
2222

@@ -39,7 +39,7 @@ jobs:
3939
LIBGIT2_SYS_USE_PKG_CONFIG: "1"
4040

4141
- name: Golangci lint
42-
uses: golangci/[email protected]
42+
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
4343
with:
4444
version: v2.4
4545
args: --verbose --timeout=10m

‎.github/workflows/release.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -27,12 +27,12 @@ jobs:
2727

2828
steps:
2929
- name: Checkout code
30-
uses: actions/checkout@v6
30+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3131
with:
3232
fetch-depth: 0
3333

3434
- name: Set up Go
35-
uses: actions/setup-go@v6
35+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
3636
with:
3737
go-version: '1.24' # Adjust to your Go version
3838

@@ -125,7 +125,7 @@ jobs:
125125
nfpm pkg --packager rpm --config hack/nfpm.yaml --target dist/modctl-${TAG}-${{ matrix.goos }}-${{ matrix.goarch }}.rpm
126126
127127
- name: Upload artifacts
128-
uses: actions/upload-artifact@v6
128+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
129129
with:
130130
name: modctl-${{ matrix.goos }}-${{ matrix.goarch }}
131131
path: dist/
@@ -135,7 +135,7 @@ jobs:
135135
runs-on: ubuntu-latest
136136
steps:
137137
- name: Download all artifacts
138-
uses: actions/download-artifact@v7
138+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
139139
with:
140140
path: artifacts
141141

@@ -145,7 +145,7 @@ jobs:
145145
find . -type f \( -name "modctl-*.tar.gz" -o -name "modctl-*.deb" -o -name "modctl-*.rpm" \) -exec shasum -a 256 {} \; > ../checksums.txt
146146
147147
- name: Create draft release
148-
uses: softprops/action-gh-release@v2
148+
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
149149
with:
150150
draft: true
151151
files: |

0 commit comments

Comments
 (0)