Skip to content

Commit 3d19ac2

Browse files
swadaptiveswadaptive
authored
(chore): Pin github actions to specific commit hashes (#1105)
* Pin GitHub actions versions to hashes * Move to rust setup action that support Dependabot-friendly versioning
1 parent a4a03a8 commit 3d19ac2

4 files changed

Lines changed: 59 additions & 59 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -41,11 +41,11 @@ jobs:
4141
echo "TMP=$env:RUNNER_TEMP" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
4242
echo "TEMP=$env:RUNNER_TEMP" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
4343
- name: Checkout code
44-
uses: actions/checkout@v6
44+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4545
with:
4646
ref: ${{ github.sha }}
4747
- name: Setup java
48-
uses: actions/setup-java@v5
48+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4949
with:
5050
distribution: 'zulu'
5151
java-version: ${{ matrix.java }}
@@ -62,12 +62,12 @@ jobs:
6262
echo "BUILD_JAVA_HOME=$env:JAVA_HOME" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
6363
echo "BUILD_JAVA_VERSION=${{ matrix.java }}" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
6464
- name: Setup java to run Gradle
65-
uses: actions/setup-java@v5
65+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
6666
with:
6767
distribution: 'zulu'
6868
java-version: ${{ env.JAVA_VERSION }}
6969
- name: Setup Gradle
70-
uses: gradle/actions/setup-gradle@v6
70+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
7171
- name: Build with Gradle
7272
run: ./gradlew
7373
- name: Copy test logs
@@ -78,7 +78,7 @@ jobs:
7878
./gradlew tarTestLogs
7979
- name: Upload crash logs
8080
if: always() && steps.copy_test_logs.outputs.file == 'build/distributions/test_logs.tbz2'
81-
uses: actions/upload-artifact@v7
81+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8282
with:
8383
name: crash-logs-${{ matrix.os }}-java-${{ matrix.java }}
8484
path: ${{ steps.copy_test_logs.outputs.file }}
@@ -96,11 +96,11 @@ jobs:
9696
DOTNET_CLI_TELEMETRY_OPTOUT: 1
9797
steps:
9898
- name: Checkout code
99-
uses: actions/checkout@v6
99+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
100100
with:
101101
ref: ${{ github.sha }}
102102
- name: Setup java to run Gradle script
103-
uses: actions/setup-java@v5
103+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
104104
with:
105105
distribution: 'zulu'
106106
java-version: ${{ env.JAVA_VERSION }}
@@ -110,16 +110,16 @@ jobs:
110110
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
111111
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
112112
- name: Setup Gradle
113-
uses: gradle/actions/setup-gradle@v6
113+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
114114
- name: Cache NuGet dependencies
115-
uses: actions/cache@v4
115+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
116116
with:
117117
path: ~/.nuget/packages
118118
key: ${{ runner.os }}-nuget-${{ hashFiles('csharp/**/*.sln') }}
119119
restore-keys: |
120120
${{ runner.os }}-nuget-
121121
- name: Setup dotnet
122-
uses: actions/setup-dotnet@v5
122+
uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
123123
with:
124124
dotnet-version: ${{ matrix.dotnet }}
125125
dotnet-quality: 'ga'
@@ -143,7 +143,7 @@ jobs:
143143
CXX: g++-${{ matrix.version }}
144144
steps:
145145
- name: Checkout code
146-
uses: actions/checkout@v6
146+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
147147
with:
148148
ref: ${{ github.sha }}
149149
- name: Install compiler
@@ -152,7 +152,7 @@ jobs:
152152
sudo apt-get update
153153
sudo apt-get install -y g++-${{ matrix.version }}
154154
- name: Setup java to run Gradle script
155-
uses: actions/setup-java@v5
155+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
156156
with:
157157
distribution: 'zulu'
158158
java-version: ${{ env.JAVA_VERSION }}
@@ -162,7 +162,7 @@ jobs:
162162
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
163163
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
164164
- name: Setup Gradle
165-
uses: gradle/actions/setup-gradle@v6
165+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
166166
- name: Build
167167
run: ./cppbuild/cppbuild
168168

@@ -179,7 +179,7 @@ jobs:
179179
CXX: clang++-${{ matrix.version }}
180180
steps:
181181
- name: Checkout code
182-
uses: actions/checkout@v6
182+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
183183
with:
184184
ref: ${{ github.sha }}
185185
- name: Install compiler
@@ -190,7 +190,7 @@ jobs:
190190
sudo apt-get update
191191
sudo apt-get install -y clang-${{ matrix.version }}
192192
- name: Setup java to run Gradle script
193-
uses: actions/setup-java@v5
193+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
194194
with:
195195
distribution: 'zulu'
196196
java-version: ${{ env.JAVA_VERSION }}
@@ -200,7 +200,7 @@ jobs:
200200
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
201201
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
202202
- name: Setup Gradle
203-
uses: gradle/actions/setup-gradle@v6
203+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
204204
- name: Build
205205
run: ./cppbuild/cppbuild
206206

@@ -217,11 +217,11 @@ jobs:
217217
CXX: clang++
218218
steps:
219219
- name: Checkout code
220-
uses: actions/checkout@v6
220+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
221221
with:
222222
ref: ${{ github.sha }}
223223
- name: Setup java to run Gradle script
224-
uses: actions/setup-java@v5
224+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
225225
with:
226226
distribution: 'zulu'
227227
java-version: ${{ env.JAVA_VERSION }}
@@ -231,7 +231,7 @@ jobs:
231231
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
232232
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
233233
- name: Setup Gradle
234-
uses: gradle/actions/setup-gradle@v6
234+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
235235
- name: Build
236236
run: cmake --version && ./cppbuild/cppbuild
237237

@@ -252,11 +252,11 @@ jobs:
252252
echo "TMP=$env:RUNNER_TEMP" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
253253
echo "TEMP=$env:RUNNER_TEMP" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
254254
- name: Checkout code
255-
uses: actions/checkout@v6
255+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
256256
with:
257257
ref: ${{ github.sha }}
258258
- name: Setup java to run Gradle script
259-
uses: actions/setup-java@v5
259+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
260260
with:
261261
distribution: 'zulu'
262262
java-version: ${{ env.JAVA_VERSION }}
@@ -266,7 +266,7 @@ jobs:
266266
echo "BUILD_JAVA_HOME=$env:JAVA_HOME" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
267267
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" | Out-File $env:GITHUB_ENV -Encoding utf8 -Append
268268
- name: Setup Gradle
269-
uses: gradle/actions/setup-gradle@v6
269+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
270270
- name: Build
271271
run: cppbuild/cppbuild.cmd
272272

@@ -280,15 +280,15 @@ jobs:
280280
rust: [ stable, beta, nightly ]
281281
steps:
282282
- name: Checkout code
283-
uses: actions/checkout@v6
283+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
284284
with:
285285
ref: ${{ github.sha }}
286286
- name: Rust setup
287-
uses: dtolnay/rust-toolchain@stable
287+
uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7 # v1.16.0
288288
with:
289289
toolchain: ${{ matrix.rust }}
290290
- name: Setup java to run Gradle script
291-
uses: actions/setup-java@v5
291+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
292292
with:
293293
distribution: 'zulu'
294294
java-version: ${{ env.JAVA_VERSION }}
@@ -298,7 +298,7 @@ jobs:
298298
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
299299
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
300300
- name: Setup Gradle
301-
uses: gradle/actions/setup-gradle@v6
301+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
302302
- run: ./gradlew runRustTests
303303

304304
golang-build:
@@ -311,15 +311,15 @@ jobs:
311311
version: [ '1.23.x', '1.24.x' ]
312312
steps:
313313
- name: Checkout code
314-
uses: actions/checkout@v6
314+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
315315
with:
316316
ref: ${{ github.sha }}
317317
- name: Setup Go
318-
uses: actions/setup-go@v4
318+
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
319319
with:
320320
go-version: ${{ matrix.version }}
321321
- name: Setup java to run Gradle script
322-
uses: actions/setup-java@v5
322+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
323323
with:
324324
distribution: 'zulu'
325325
java-version: ${{ env.JAVA_VERSION }}
@@ -329,7 +329,7 @@ jobs:
329329
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
330330
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
331331
- name: Setup Gradle
332-
uses: gradle/actions/setup-gradle@v6
332+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
333333
- name: Generate jar
334334
run: ./gradlew assemble
335335
- name: Run tests

‎.github/workflows/codeql.yml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939

4040
steps:
4141
- name: Checkout code
42-
uses: actions/checkout@v6
42+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
ref: ${{ github.sha }}
4545

4646
- name: Setup java
47-
uses: actions/setup-java@v5
47+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4848
with:
4949
distribution: 'zulu'
5050
java-version: ${{ matrix.java }}
@@ -56,10 +56,10 @@ jobs:
5656
echo "BUILD_JAVA_VERSION=${{ matrix.java }}" >> $GITHUB_ENV
5757
5858
- name: Setup Gradle
59-
uses: gradle/actions/setup-gradle@v6
59+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
6060

6161
- name: Initialize CodeQL
62-
uses: github/codeql-action/init@v4
62+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
6363
with:
6464
languages: ${{ matrix.language }}
6565
config-file: ./.github/codeql/codeql-config.yml
@@ -68,7 +68,7 @@ jobs:
6868
run: ./gradlew
6969

7070
- name: Perform CodeQL Analysis
71-
uses: github/codeql-action/analyze@v4
71+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
7272
with:
7373
category: "/language:${{matrix.language}}"
7474

@@ -89,20 +89,20 @@ jobs:
8989
DOTNET_CLI_TELEMETRY_OPTOUT: 1
9090
steps:
9191
- name: Checkout code
92-
uses: actions/checkout@v6
92+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9393
with:
9494
ref: ${{ github.sha }}
9595

9696
- name: Cache NuGet dependencies
97-
uses: actions/cache@v4
97+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
9898
with:
9999
path: ~/.nuget/packages
100100
key: ${{ runner.os }}-nuget-${{ hashFiles('csharp/**/*.sln') }}
101101
restore-keys: |
102102
${{ runner.os }}-nuget-
103103
104104
- name: Setup java
105-
uses: actions/setup-java@v5
105+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
106106
with:
107107
distribution: 'zulu'
108108
java-version: ${{ env.JAVA_VERSION }}
@@ -114,15 +114,15 @@ jobs:
114114
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
115115
116116
- name: Setup Gradle
117-
uses: gradle/actions/setup-gradle@v6
117+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
118118

119119
- name: Setup dotnet
120-
uses: actions/setup-dotnet@v5
120+
uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
121121
with:
122122
dotnet-version: ${{ matrix.dotnet }}
123123

124124
- name: Initialize CodeQL
125-
uses: github/codeql-action/init@v4
125+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
126126
with:
127127
languages: ${{ matrix.language }}
128128
config-file: ./.github/codeql/codeql-config.yml
@@ -131,7 +131,7 @@ jobs:
131131
run: ./csharp/build.sh
132132

133133
- name: Perform CodeQL Analysis
134-
uses: github/codeql-action/analyze@v4
134+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
135135
with:
136136
category: "/language:${{matrix.language}}"
137137

@@ -152,12 +152,12 @@ jobs:
152152
CXX: g++-${{ matrix.version }}
153153
steps:
154154
- name: Checkout code
155-
uses: actions/checkout@v6
155+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
156156
with:
157157
ref: ${{ github.sha }}
158158

159159
- name: Setup java
160-
uses: actions/setup-java@v5
160+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
161161
with:
162162
distribution: 'zulu'
163163
java-version: ${{ env.JAVA_VERSION }}
@@ -169,14 +169,14 @@ jobs:
169169
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
170170
171171
- name: Setup Gradle
172-
uses: gradle/actions/setup-gradle@v6
172+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
173173

174174
- name: Install compiler
175175
run: |
176176
sudo apt-get install -y g++-${{ matrix.version }}
177177
178178
- name: Initialize CodeQL
179-
uses: github/codeql-action/init@v4
179+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
180180
with:
181181
languages: ${{ matrix.language }}
182182
config-file: ./.github/codeql/codeql-config.yml
@@ -185,21 +185,21 @@ jobs:
185185
run: ./cppbuild/cppbuild
186186

187187
- name: Perform CodeQL Analysis
188-
uses: github/codeql-action/analyze@v4
188+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
189189
with:
190190
category: "/language:${{ matrix.language }}"
191191
upload: false
192192
output: sarif-results
193193

194194
- name: filter-sarif
195-
uses: advanced-security/filter-sarif@v1
195+
uses: advanced-security/filter-sarif@2da736ff05ef065cb2894ac6892e47b5eac2c3c0 # v1.1
196196
with:
197197
patterns: |
198198
-**/thirdparty/**
199199
input: sarif-results/${{ matrix.language }}.sarif
200200
output: sarif-results/${{ matrix.language }}.sarif
201201

202202
- name: Upload SARIF
203-
uses: github/codeql-action/upload-sarif@v4
203+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
204204
with:
205205
sarif_file: sarif-results/${{ matrix.language }}.sarif

‎.github/workflows/release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,11 @@ jobs:
2323
runs-on: ubuntu-24.04
2424
steps:
2525
- name: checkout
26-
uses: actions/checkout@v6
26+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2727
with:
2828
ref: ${{ github.ref }}
2929
- name: Setup java
30-
uses: actions/setup-java@v5
30+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
3131
with:
3232
distribution: 'zulu'
3333
java-version: ${{ env.JAVA_VERSION }}
@@ -37,7 +37,7 @@ jobs:
3737
echo "BUILD_JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
3838
echo "BUILD_JAVA_VERSION=${{ env.JAVA_VERSION }}" >> $GITHUB_ENV
3939
- name: Setup Gradle
40-
uses: gradle/actions/setup-gradle@v6
40+
uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
4141
- name: Publish with Gradle
4242
run: ./gradlew publish uploadArtifactsToCentralPortal
4343
env:

0 commit comments

Comments
 (0)