Skip to content

Commit 73aa2b6

Browse files
andreaangiolilloandreaangiolillo
authored
chore: Ping GH actions to a GitSHA (#199)
1 parent 4910dfd commit 73aa2b6

File tree

10 files changed

+64
-62
lines changed

10 files changed

+64
-62
lines changed

‎.github/pull_request_template.md‎

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎.github/workflows/code-health.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
contents: write
1414
steps:
1515
- name: Checkout Repository
16-
uses: actions/checkout@v4
16+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
1717
with:
1818
ref: ${{ github.event.pull_request.head.ref }}
1919
repository: ${{ github.event.pull_request.head.repo.full_name }}
2020
- name: Setup Node.js
21-
uses: actions/setup-node@v4
21+
uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
2222
with:
2323
node-version: 18.x
2424
- name: Install dependencies
@@ -29,14 +29,14 @@ jobs:
2929
runs-on: ubuntu-latest
3030
steps:
3131
- name: Checkout Repository
32-
uses: actions/checkout@v4
32+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
3333
- name: actionlint
3434
run: |
3535
bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
3636
./actionlint -color
3737
shell: bash
3838
- name: Setup Node.js
39-
uses: actions/setup-node@v4
39+
uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
4040
with:
4141
node-version: 18.x
4242
- name: Install dependencies
@@ -47,9 +47,9 @@ jobs:
4747
name: shellcheck
4848
runs-on: ubuntu-latest
4949
steps:
50-
- uses: actions/checkout@v4
50+
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
5151
- name: Run ShellCheck
52-
uses: bewuethr/shellcheck-action@v2
52+
uses: bewuethr/shellcheck-action@a7092784dbc0f7b2139dd8396ab357fe4678e958
5353
call-package-workflow:
5454
needs: [compile, lint, shellcheck]
5555
secrets: inherit

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,6 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Checkout Repository
13-
uses: actions/checkout@v4
13+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
1414
- name: Dependency Review
15-
uses: actions/dependency-review-action@v4
15+
uses: actions/dependency-review-action@4901385134134e04cec5fbe5ddfe3b2c5bd5d976

‎.github/workflows/issues.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@
5757
echo "The following JIRA ticket has been created: ${JIRA_TICKET_ID}"
5858
echo "jira-ticket-id=${JIRA_TICKET_ID}" >> "${GITHUB_OUTPUT}"
5959
- name: Add comment
60-
uses: peter-evans/create-or-update-comment@v3
60+
uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2
6161
with:
6262
issue-number: ${{ github.event.issue.number }}
6363
body: |

‎.github/workflows/package.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
CI: "true"
1414
steps:
1515
- name: Checkout
16-
uses: actions/checkout@v4
16+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
1717
with:
1818
ref: ${{ github.event.pull_request.head.ref }}
1919
repository: ${{ github.event.pull_request.head.repo.full_name }}
2020
- name: Setup Node.js
21-
uses: actions/setup-node@v4
21+
uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
2222
with:
2323
node-version: 18.x
2424
- name: Install dependencies
@@ -32,7 +32,7 @@ jobs:
3232
git diff --staged --patch --exit-code > .repo.patch || echo "self_mutation_happened=true" >> "${GITHUB_OUTPUT}"
3333
- name: Upload patch
3434
if: steps.self_mutation.outputs.self_mutation_happened
35-
uses: actions/upload-artifact@v3
35+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
3636
with:
3737
name: .repo.patch
3838
path: .repo.patch
@@ -46,7 +46,7 @@ jobs:
4646
run: cd dist && rm -rf submodules/ && getfacl -R . > permissions-backup.acl
4747
continue-on-error: true
4848
- name: Upload artifact
49-
uses: actions/upload-artifact@v3
49+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
5050
with:
5151
name: build-artifact
5252
path: dist
@@ -56,11 +56,11 @@ jobs:
5656
permissions: {}
5757
if: "! needs.build.outputs.self_mutation_happened"
5858
steps:
59-
- uses: actions/setup-node@v4
59+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
6060
with:
6161
node-version: 18.x
6262
- name: Download build artifacts
63-
uses: actions/download-artifact@v3
63+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
6464
with:
6565
name: build-artifact
6666
path: dist
@@ -79,15 +79,15 @@ jobs:
7979
permissions: {}
8080
if: "! needs.build.outputs.self_mutation_happened"
8181
steps:
82-
- uses: actions/setup-java@v4
82+
- uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93
8383
with:
8484
distribution: temurin
8585
java-version: 11.x
86-
- uses: actions/setup-node@v4
86+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
8787
with:
8888
node-version: 18.x
8989
- name: Download build artifacts
90-
uses: actions/download-artifact@v3
90+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
9191
with:
9292
name: build-artifact
9393
path: dist
@@ -106,14 +106,14 @@ jobs:
106106
permissions: {}
107107
if: "! needs.build.outputs.self_mutation_happened"
108108
steps:
109-
- uses: actions/setup-node@v4
109+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
110110
with:
111111
node-version: 18.x
112-
- uses: actions/setup-python@v5
112+
- uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
113113
with:
114114
python-version: 3.x
115115
- name: Download build artifacts
116-
uses: actions/download-artifact@v3
116+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
117117
with:
118118
name: build-artifact
119119
path: dist
@@ -132,14 +132,14 @@ jobs:
132132
permissions: {}
133133
if: "! needs.build.outputs.self_mutation_happened"
134134
steps:
135-
- uses: actions/setup-node@v4
135+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
136136
with:
137137
node-version: 18.x
138-
- uses: actions/setup-dotnet@v3
138+
- uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2
139139
with:
140140
dotnet-version: 3.x
141141
- name: Download build artifacts
142-
uses: actions/download-artifact@v3
142+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
143143
with:
144144
name: build-artifact
145145
path: dist
@@ -158,14 +158,14 @@ jobs:
158158
permissions: {}
159159
if: "! needs.build.outputs.self_mutation_happened"
160160
steps:
161-
- uses: actions/setup-node@v4
161+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
162162
with:
163163
node-version: 18.x
164-
- uses: actions/setup-go@v5
164+
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
165165
with:
166166
go-version: ^1.16.0
167167
- name: Download build artifacts
168-
uses: actions/download-artifact@v3
168+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
169169
with:
170170
name: build-artifact
171171
path: dist

‎.github/workflows/pull-request-lint.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
permissions:
1616
pull-requests: write
1717
steps:
18-
- uses: amannn/action-semantic-pull-request@v5
18+
- uses: amannn/action-semantic-pull-request@e9fabac35e210fea40ca5b14c0da95a099eff26f
1919
id: lint_pr_title
2020
env:
2121
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -35,7 +35,7 @@ jobs:
3535
revert
3636
style
3737
requireScope: false
38-
- uses: marocchino/sticky-pull-request-comment@v2
38+
- uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
3939
# When the previous steps fails, the workflow would stop. By adding this
4040
# condition you can continue the execution with the populated error message.
4141
if: always() && (steps.lint_pr_title.outputs.error_message != null)
@@ -53,7 +53,7 @@ jobs:
5353
```
5454
# Delete a previous comment when the issue has been resolved
5555
- if: ${{ steps.lint_pr_title.outputs.error_message == null }}
56-
uses: marocchino/sticky-pull-request-comment@v2
56+
uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
5757
with:
5858
header: pr-title-lint-error
5959
delete: true

‎.github/workflows/release.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
CI: "true"
1111
steps:
1212
- name: Checkout
13-
uses: actions/checkout@v4
13+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
1414
with:
1515
fetch-depth: 0
1616
- name: Set git config safe.directory
@@ -20,7 +20,7 @@ jobs:
2020
git config user.name "github-actions"
2121
git config user.email "[email protected]"
2222
- name: Setup Node.js
23-
uses: actions/setup-node@v4
23+
uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
2424
with:
2525
node-version: 16.14.0
2626
- name: Install dependencies
@@ -31,7 +31,7 @@ jobs:
3131
run: cd dist && rm -rf submodules/ && getfacl -R . > permissions-backup.acl
3232
continue-on-error: true
3333
- name: Upload artifact
34-
uses: actions/upload-artifact@v3
34+
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
3535
with:
3636
name: build-artifact
3737
path: dist
@@ -43,11 +43,11 @@ jobs:
4343
contents: read
4444
issues: write
4545
steps:
46-
- uses: actions/setup-node@v4
46+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
4747
with:
4848
node-version: 16.14.0
4949
- name: Download build artifacts
50-
uses: actions/download-artifact@v3
50+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
5151
with:
5252
name: build-artifact
5353
path: dist
@@ -74,7 +74,7 @@ jobs:
7474
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
7575
- name: Create Issue
7676
if: ${{ failure() }}
77-
uses: imjohnbo/issue-bot@v3
77+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
7878
with:
7979
labels: failed-release
8080
title: Publishing v${{ steps.extract-version.outputs.VERSION }} to npm failed
@@ -87,15 +87,15 @@ jobs:
8787
contents: read
8888
issues: write
8989
steps:
90-
- uses: actions/setup-java@v4
90+
- uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93
9191
with:
9292
distribution: temurin
9393
java-version: 11.x
94-
- uses: actions/setup-node@v4
94+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
9595
with:
9696
node-version: 16.14.0
9797
- name: Download build artifacts
98-
uses: actions/download-artifact@v3
98+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
9999
with:
100100
name: build-artifact
101101
path: dist
@@ -124,7 +124,7 @@ jobs:
124124
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
125125
- name: Create Issue
126126
if: ${{ failure() }}
127-
uses: imjohnbo/issue-bot@v3
127+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
128128
with:
129129
labels: failed-release
130130
title: Publishing v${{ steps.extract-version.outputs.VERSION }} to Maven Central failed
@@ -137,14 +137,14 @@ jobs:
137137
contents: read
138138
issues: write
139139
steps:
140-
- uses: actions/setup-node@v4
140+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
141141
with:
142142
node-version: 16.14.0
143-
- uses: actions/setup-python@v5
143+
- uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
144144
with:
145145
python-version: 3.x
146146
- name: Download build artifacts
147-
uses: actions/download-artifact@v3
147+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
148148
with:
149149
name: build-artifact
150150
path: dist
@@ -170,7 +170,7 @@ jobs:
170170
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
171171
- name: Create Issue
172172
if: ${{ failure() }}
173-
uses: imjohnbo/issue-bot@v3
173+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
174174
with:
175175
labels: failed-release
176176
title: Publishing v${{ steps.extract-version.outputs.VERSION }} to PyPI failed
@@ -183,14 +183,14 @@ jobs:
183183
contents: read
184184
issues: write
185185
steps:
186-
- uses: actions/setup-node@v4
186+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
187187
with:
188188
node-version: 16.14.0
189-
- uses: actions/setup-dotnet@v3
189+
- uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2
190190
with:
191191
dotnet-version: 3.x
192192
- name: Download build artifacts
193-
uses: actions/download-artifact@v3
193+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
194194
with:
195195
name: build-artifact
196196
path: dist
@@ -215,7 +215,7 @@ jobs:
215215
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
216216
- name: Create Issue
217217
if: ${{ failure() }}
218-
uses: imjohnbo/issue-bot@v3
218+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
219219
with:
220220
labels: failed-release
221221
title: Publishing v${{ steps.extract-version.outputs.VERSION }} to NuGet Gallery failed
@@ -228,14 +228,14 @@ jobs:
228228
contents: read
229229
issues: write
230230
steps:
231-
- uses: actions/setup-node@v4
231+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
232232
with:
233233
node-version: 16.14.0
234-
- uses: actions/setup-go@v5
234+
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
235235
with:
236236
go-version: ^1.16.0
237237
- name: Download build artifacts
238-
uses: actions/download-artifact@v3
238+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
239239
with:
240240
name: build-artifact
241241
path: dist
@@ -262,7 +262,7 @@ jobs:
262262
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
263263
- name: Create Issue
264264
if: ${{ failure() }}
265-
uses: imjohnbo/issue-bot@v3
265+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
266266
with:
267267
labels: failed-release
268268
title: Publishing v${{ steps.extract-version.outputs.VERSION }} to GitHub Go Module Repository failed
@@ -275,11 +275,11 @@ jobs:
275275
contents: write
276276
issues: write
277277
steps:
278-
- uses: actions/setup-node@v4
278+
- uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
279279
with:
280280
node-version: 16.14.0
281281
- name: Download build artifacts
282-
uses: actions/download-artifact@v3
282+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
283283
with:
284284
name: build-artifact
285285
path: dist
@@ -302,7 +302,7 @@ jobs:
302302
run: echo "VERSION=$(cat dist/version.txt)" >> "${GITHUB_OUTPUT}"
303303
- name: Create Issue
304304
if: ${{ failure() }}
305-
uses: imjohnbo/issue-bot@v3
305+
uses: imjohnbo/issue-bot@6924a99d928dc228f407d34eb3d0149eda73f2a7
306306
env:
307307
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
308308
with:

0 commit comments

Comments
 (0)