Skip to content

Commit d683e7c

Browse files
jangalda-nscthst-nordic
jangalda-nsc
authored and
thst-nordic
committed
[nrf noup] ci: Pin GH actions to SHAs
Jira: NCSDK-32440 Signed-off-by: Jan Gałda <[email protected]>
1 parent 87432d9 commit d683e7c

35 files changed

+106
-106
lines changed

‎.github/workflows/assigner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
pip install -U PyGithub>=1.55 west
2828
2929
- name: Check out source code
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
3131

3232
- name: Run assignment script
3333
env:

‎.github/workflows/backport.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
)
2525
steps:
2626
- name: Backport
27-
uses: zephyrproject-rtos/[email protected]
27+
uses: zephyrproject-rtos/action-backport@6b0bae5b575d289305a22ab11a273941b518994c # v2.0.3-3
2828
with:
2929
github_token: ${{ secrets.ZB_GITHUB_TOKEN }}
3030
issue_labels: Backport

‎.github/workflows/backport_issue_check.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
steps:
2323
- name: Check out source code
24-
uses: actions/checkout@v4
24+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
2525

2626
- name: Install Python dependencies
2727
run: |

‎.github/workflows/bsim-tests-publish.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313

1414
steps:
1515
- name: Download artifacts
16-
uses: dawidd6/action-download-artifact@v6
16+
uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
1717
with:
1818
run_id: ${{ github.event.workflow_run.id }}
1919

2020
- name: Publish BabbleSim Test Results
21-
uses: EnricoMi/publish-unit-test-result-action@v2
21+
uses: EnricoMi/publish-unit-test-result-action@78879197c58e9f9595bf33d2d9c446d344fcca57 # v2
2222
with:
2323
check_name: BabbleSim Test Results
2424
comment_mode: off

‎.github/workflows/bsim-tests.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
git remote set-url origin ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}
6868
6969
- name: Checkout
70-
uses: actions/checkout@v4
70+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
7171
with:
7272
fetch-depth: 0
7373

@@ -91,7 +91,7 @@ jobs:
9191
echo "ZEPHYR_SDK_INSTALL_DIR=/opt/toolchains/zephyr-sdk-$( cat SDK_VERSION )" >> $GITHUB_ENV
9292
9393
- name: Check common triggering files
94-
uses: tj-actions/changed-files@v45
94+
uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45
9595
id: check-common-files
9696
with:
9797
files: |
@@ -110,7 +110,7 @@ jobs:
110110
modules/hal_nordic/**
111111
112112
- name: Check if Bluethooth files changed
113-
uses: tj-actions/changed-files@v45
113+
uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45
114114
id: check-bluetooth-files
115115
with:
116116
files: |
@@ -119,7 +119,7 @@ jobs:
119119
subsys/bluetooth/
120120
121121
- name: Check if Networking files changed
122-
uses: tj-actions/changed-files@v45
122+
uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45
123123
id: check-networking-files
124124
with:
125125
files: |
@@ -132,7 +132,7 @@ jobs:
132132
include/zephyr/net/ieee802154*
133133
134134
- name: Check if UART files changed
135-
uses: tj-actions/changed-files@v45
135+
uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c # v45
136136
id: check-uart-files
137137
with:
138138
files: |
@@ -178,23 +178,23 @@ jobs:
178178
179179
- name: Upload Unit Test Results in HTML
180180
if: always()
181-
uses: actions/upload-artifact@v4
181+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
182182
with:
183183
name: HTML Unit Test Results
184184
if-no-files-found: ignore
185185
path: |
186186
junit.html
187187
188188
- name: Publish Unit Test Results
189-
uses: EnricoMi/publish-unit-test-result-action@v2
189+
uses: EnricoMi/publish-unit-test-result-action@78879197c58e9f9595bf33d2d9c446d344fcca57 # v2
190190
with:
191191
check_name: Bsim Test Results
192192
files: "junit.xml"
193193
comment_mode: off
194194

195195
- name: Upload Event Details
196196
if: always()
197-
uses: actions/upload-artifact@v4
197+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
198198
with:
199199
name: event
200200
path: |

‎.github/workflows/bug_snapshot.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@v4
24+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
2525

2626
- name: Install Python dependencies
2727
run: |
@@ -41,7 +41,7 @@ jobs:
4141
echo "BUGS_PICKLE_PATH=${BUGS_PICKLE_PATH}" >> ${GITHUB_ENV}
4242
4343
- name: Configure AWS Credentials
44-
uses: aws-actions/configure-aws-credentials@v4
44+
uses: aws-actions/configure-aws-credentials@49f33fe638c0cba4fb16037a27915a7ab7740259 # v4
4545
with:
4646
aws-access-key-id: ${{ vars.AWS_BUILDS_ZEPHYR_BUG_SNAPSHOT_ACCESS_KEY_ID }}
4747
aws-secret-access-key: ${{ secrets.AWS_BUILDS_ZEPHYR_BUG_SNAPSHOT_SECRET_ACCESS_KEY }}

‎.github/workflows/clang.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
git remote set-url origin ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}
5050
5151
- name: Checkout
52-
uses: actions/checkout@v4
52+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
5353
with:
5454
ref: ${{ github.event.pull_request.head.sha }}
5555
fetch-depth: 0
@@ -127,7 +127,7 @@ jobs:
127127
128128
- name: Upload Unit Test Results
129129
if: always() && steps.twister.outputs.report_needed != 0
130-
uses: actions/upload-artifact@v4
130+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
131131
with:
132132
name: Unit Test Results (Subset ${{ matrix.platform }})
133133
path: twister-out/twister.xml
@@ -139,7 +139,7 @@ jobs:
139139
if: (success() || failure() ) && needs.clang-build.outputs.report_needed != 0
140140
steps:
141141
- name: Download Artifacts
142-
uses: actions/download-artifact@v4
142+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
143143
with:
144144
path: artifacts
145145
- name: Merge Test Results
@@ -150,15 +150,15 @@ jobs:
150150
151151
- name: Upload Unit Test Results in HTML
152152
if: always()
153-
uses: actions/upload-artifact@v4
153+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
154154
with:
155155
name: HTML Unit Test Results
156156
if-no-files-found: ignore
157157
path: |
158158
junit-clang.html
159159
160160
- name: Publish Unit Test Results
161-
uses: EnricoMi/publish-unit-test-result-action@v2
161+
uses: EnricoMi/publish-unit-test-result-action@78879197c58e9f9595bf33d2d9c446d344fcca57 # v2
162162
if: always()
163163
with:
164164
check_name: Unit Test Results

‎.github/workflows/codecov.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ jobs:
6161
git remote set-url origin ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}
6262
6363
- name: checkout
64-
uses: actions/checkout@v4
64+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
6565
with:
6666
fetch-depth: 0
6767

@@ -121,7 +121,7 @@ jobs:
121121
122122
- name: Upload Coverage Results
123123
if: always()
124-
uses: actions/upload-artifact@v4
124+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
125125
with:
126126
name: Coverage Data (Subset ${{ matrix.normalized }})
127127
path: |
@@ -137,12 +137,12 @@ jobs:
137137

138138
steps:
139139
- name: checkout
140-
uses: actions/checkout@v4
140+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
141141
with:
142142
fetch-depth: 0
143143

144144
- name: Download Artifacts
145-
uses: actions/download-artifact@v4
145+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
146146
with:
147147
path: coverage/reports
148148

@@ -209,7 +209,7 @@ jobs:
209209
210210
- name: Upload Merged Coverage Results and Report
211211
if: always()
212-
uses: actions/upload-artifact@v4
212+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
213213
with:
214214
name: Coverage Data and report
215215
path: |
@@ -220,7 +220,7 @@ jobs:
220220
221221
- name: Upload coverage to Codecov
222222
if: always()
223-
uses: codecov/codecov-action@v4
223+
uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
224224
with:
225225
env_vars: OS,PYTHON
226226
fail_ci_if_error: false

‎.github/workflows/coding_guidelines.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,13 @@ jobs:
88
name: Run coding guidelines checks on patch series (PR)
99
steps:
1010
- name: Checkout the code
11-
uses: actions/checkout@v4
11+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
1212
with:
1313
ref: ${{ github.event.pull_request.head.sha }}
1414
fetch-depth: 0
1515

1616
- name: cache-pip
17-
uses: actions/cache@v4
17+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
1818
with:
1919
path: ~/.cache/pip
2020
key: ${{ runner.os }}-pip-${{ hashFiles('.github/workflows/coding_guidelines.yml') }}

‎.github/workflows/commit-tags.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
echo "$HOME/.local/bin" >> $GITHUB_PATH
1717
1818
- name: Checkout the code
19-
uses: actions/checkout@v3
19+
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
2020
with:
2121
ref: ${{ github.event.pull_request.head.sha }}
2222
fetch-depth: 0

0 commit comments

Comments
 (0)