diff --git a/.github/workflows/ci-alpine-build.yml b/.github/workflows/ci-alpine-build.yml index bcbe8814..c23c7a1e 100644 --- a/.github/workflows/ci-alpine-build.yml +++ b/.github/workflows/ci-alpine-build.yml @@ -57,7 +57,7 @@ jobs: steps: - name: Checkout ${{ inputs.distinct_id }} - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false @@ -172,7 +172,7 @@ jobs: run: docker exec -u gh:gh -w /home/gh/${qbt_build_dir}/completed ${container_name} mv -f qbittorrent-nox ${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox - name: Generate artifact attestation ${{ inputs.distinct_id }} - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2 with: subject-path: "${{ env.qbt_build_dir }}/completed/${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox" @@ -181,7 +181,7 @@ jobs: - name: Host - Upload libtorrent-v${{ matrix.qbt_libtorrent_version }}-qbittorrent-nox and release info artifact ${{ inputs.distinct_id }} if: success() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: libtorrent-v${{ matrix.qbt_libtorrent_version }}-${{ matrix.qbt_cross_name }}-${{ matrix.qbt_qt_version_name }}qbittorrent-nox path: | @@ -190,7 +190,7 @@ jobs: - name: Host - Upload cmake graphs artifact ${{ inputs.distinct_id }} if: success() && matrix.qbt_build_tool == '' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: "${{ matrix.qbt_cross_name }}-libtorrent-v${{ matrix.qbt_libtorrent_version }}-graphs" path: "${{ env.qbt_build_dir }}/completed/*.png" diff --git a/.github/workflows/ci-alpine-release.yml b/.github/workflows/ci-alpine-release.yml index 750b5d25..8a2a1f3f 100644 --- a/.github/workflows/ci-alpine-release.yml +++ b/.github/workflows/ci-alpine-release.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout ${{ inputs.distinct_id }} - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false @@ -39,14 +39,14 @@ jobs: curl -sLo- "https://github.com/jgm/pandoc/releases/latest/download/pandoc-${pandoc_git_tag}-linux-$(dpkg --print-architecture).tar.gz" | tar xzf - --strip-components 2 -C "$(pwd)" --exclude="share" - name: Host - Download 1.2 qbittorrent-nox artifacts ${{ inputs.distinct_id }} - uses: actions/download-artifact@v5 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: path: "1.2" pattern: libtorrent-v1.2-*-qbittorrent-nox merge-multiple: true - name: Host - Download 2.0 qbittorrent-nox artifacts ${{ inputs.distinct_id }} - uses: actions/download-artifact@v5 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: path: "2.0" pattern: libtorrent-v2.0-*-qbittorrent-nox @@ -97,7 +97,7 @@ jobs: run: printf '%s\n' "release_title=$(cat ${{ matrix.qbt_libtorrent_version }}/title.md)" >> $GITHUB_ENV - name: Host- Create release - tag - assets ${{ inputs.distinct_id }} - uses: ncipollo/release-action@v1 + uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1 with: prerelease: "${{ matrix.preview_release }}" artifacts: "${{ matrix.qbt_libtorrent_version }}/*-qbittorrent-nox,dependency-version.json" diff --git a/.github/workflows/ci-auto-rerun-failed-jobs-action.yml b/.github/workflows/ci-auto-rerun-failed-jobs-action.yml index 73ff424c..d7442893 100644 --- a/.github/workflows/ci-auto-rerun-failed-jobs-action.yml +++ b/.github/workflows/ci-auto-rerun-failed-jobs-action.yml @@ -31,7 +31,7 @@ jobs: GH_TOKEN: "${{ secrets.AUTO_RERUN || github.token }}" steps: - name: Host - Checkout action ${{ inputs.distinct_id }} - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false diff --git a/.github/workflows/ci-checks.yml b/.github/workflows/ci-checks.yml index 292c51c2..21813a25 100644 --- a/.github/workflows/ci-checks.yml +++ b/.github/workflows/ci-checks.yml @@ -14,12 +14,12 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false - name: Run the sh-checker - uses: luizm/action-sh-checker@v0.9.0 + uses: luizm/action-sh-checker@17bd25a6ee188d2b91f677060038f4ba37ba14b2 # v0.9.0 env: GITHUB_TOKEN: ${{ github.token }} SHELLCHECK_OPTS: -e SC2034,SC1091 # It is possible to exclude some shellcheck warnings. @@ -33,7 +33,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false @@ -58,7 +58,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false diff --git a/.github/workflows/ci-debian-build.yml b/.github/workflows/ci-debian-build.yml index 46aa3506..b722a7fe 100644 --- a/.github/workflows/ci-debian-build.yml +++ b/.github/workflows/ci-debian-build.yml @@ -72,7 +72,7 @@ jobs: steps: - name: Checkout ${{ inputs.distinct_id }} - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false diff --git a/.github/workflows/ci-main-reusable-caller.yml b/.github/workflows/ci-main-reusable-caller.yml index 8a3415c9..254b8b7b 100644 --- a/.github/workflows/ci-main-reusable-caller.yml +++ b/.github/workflows/ci-main-reusable-caller.yml @@ -119,7 +119,7 @@ jobs: retries: ${{ github.event.inputs.retries || '1' }} distinct_id: ${{ github.event.inputs.distinct_id }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false - name: ci-auto-rerun-failed-jobs via ${{ env.github_repo || github.repository }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 746d1c30..3925d6ae 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -20,12 +20,12 @@ jobs: contents: read steps: - name: Checkout your repository using git - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false - name: Install, build, and upload your site - uses: withastro/action@v4 + uses: withastro/action@063f85a3c9fc861a0a5e5a956225d9031177eff9 # v4 with: path: ./docs @@ -41,4 +41,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4 diff --git a/.github/workflows/qi-bash.yml b/.github/workflows/qi-bash.yml index e1f68ba5..8dd39759 100644 --- a/.github/workflows/qi-bash.yml +++ b/.github/workflows/qi-bash.yml @@ -49,12 +49,12 @@ jobs: container_name: "build" steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: persist-credentials: false - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3 - name: Create docker ${{ env.container_name }} ${{ matrix.container_image }} ${{ matrix.platform }} container run: >