Pinning workflow .github/workflows/unbundled-lint-and-test.yaml

Author: eclipse-otterdog[bot]

.github/workflows/unbundled-lint-and-test.yaml

@@ -47,7 +47,7 @@ jobs:
       generic_cpp_stdlib_path: ${{ steps.set_env.outputs.generic_cpp_stdlib_path }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Add execute permissions for envsetup
         run: chmod +x build/envsetup.sh
@@ -72,7 +72,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set environment variables
         run: |
@@ -124,7 +124,7 @@ jobs:
 
       - name: Cache vsomeip build
         id: cache-vsomeip
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           path: ${{ env.VSOMEIP_INSTALL_PATH }}
           key: ${{ runner.os }}-vsomeip-${{ hashFiles(env.VSOMEIP_SOURCE_PATH_WITH_WILDCARD) }}
@@ -144,7 +144,7 @@ jobs:
 
       - name: Save vsomeip build to cache
         if: steps.cache-vsomeip.outputs.cache-hit != 'true'
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           path: ${{ env.VSOMEIP_INSTALL_PATH }}
           key: ${{ runner.os }}-vsomeip-${{ hashFiles(env.VSOMEIP_SOURCE_PATH_WITH_WILDCARD) }}
@@ -162,7 +162,7 @@ jobs:
       CACHE_KEY: ${{ needs.obtain_and_build_vsomeip.outputs.cache_key }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set environment variables
         run: |
@@ -182,7 +182,7 @@ jobs:
           echo "cache_key: ${{ env.CACHE_KEY }}"
 
       - name: Restore vsomeip build cache
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           path: ${{ env.VSOMEIP_INSTALL_PATH }}
           key: ${{ env.CACHE_KEY }}
@@ -217,8 +217,8 @@ jobs:
       GENERIC_CPP_STDLIB_PATH: ${{ needs.set-env.outputs.generic_cpp_stdlib_path }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Install C++ dependencies
         if: steps.cache-vsomeip.outputs.cache-hit != 'true'
@@ -244,7 +244,7 @@ jobs:
           echo "cache_key: ${{ env.CACHE_KEY }}"
 
       - name: Restore vsomeip build cache
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           path: ${{ env.VSOMEIP_INSTALL_PATH }}
           key: ${{ env.CACHE_KEY }}
@@ -267,25 +267,25 @@ jobs:
           LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:${VSOMEIP_INSTALL_PATH}/lib cargo test -- --test-threads 1
 
       - name: Upload coverage report (xml)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: Test Coverage Results (xml)
           path: cobertura.xml
 
       - name: Upload coverage report (lcov)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: Test Coverage Results (lcov)
           path: lcov.info
 
       - name: Upload coverage report (html)
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: Test Coverage Results (html)
           path: tarpaulin-report.html
 
       # - name: Upload coverage report
-      #   uses: actions/upload-artifact@v4
+      #   uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       #   with:
       #     name: Code coverage report
       #     path: cobertura.xml
@@ -302,7 +302,7 @@ jobs:
       GENERIC_CPP_STDLIB_PATH: ${{ needs.set-env.outputs.generic_cpp_stdlib_path }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set environment variables
         run: |
@@ -322,7 +322,7 @@ jobs:
           echo "cache_key: ${{ env.CACHE_KEY }}"
 
       - name: Restore vsomeip build cache
-        uses: actions/cache@v3
+        uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0
         with:
           path: ${{ env.VSOMEIP_INSTALL_PATH }}
           key: ${{ env.CACHE_KEY }}