Skip to content

Commit 6b3c1d2

Browse files
timkpainetimkpaine
committed
Pin actions to sha
Signed-off-by: Tim Paine <3105306+timkpaine@users.noreply.github.com>
1 parent c256630 commit 6b3c1d2

6 files changed

Lines changed: 30 additions & 30 deletions

File tree

‎.github/actions/setup-caches/action.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ runs:
1212
steps:
1313
# Setup CCache
1414
- name: Setup ccache
15-
uses: hendrikmuhs/ccache-action@v1.2.12
15+
uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03 # v1.2.23
1616
with:
1717
key: ccache-${{ runner.os }}-${{ runner.arch }}
1818
append-timestamp: false # avoid excess caching
@@ -35,7 +35,7 @@ runs:
3535
if: ${{ runner.os == 'Linux' && inputs.vcpkg == 'true' }}
3636

3737
- name: Setup vcpkg cache (Linux)
38-
uses: actions/cache@v4
38+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
3939
with:
4040
path: |
4141
/home/runner/vcpkg_cache
@@ -54,7 +54,7 @@ runs:
5454
if: ${{ runner.os == 'macOS' && inputs.vcpkg == 'true' }}
5555

5656
- name: Setup vcpkg cache (macOS)
57-
uses: actions/cache@v4
57+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
5858
with:
5959
path: |
6060
/Users/runner/vcpkg_cache
@@ -73,7 +73,7 @@ runs:
7373
if: ${{ runner.os == 'Windows' && inputs.vcpkg == 'true'}}
7474

7575
- name: Setup vcpkg cache (Windows)
76-
uses: actions/cache@v4
76+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
7777
with:
7878
path: |
7979
C:\\Users\\runneradmin\\AppData\\Local\\vcpkg_cache

‎.github/actions/setup-python/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,15 @@ runs:
2121
using: 'composite'
2222
steps:
2323
- name: Setup pip cache
24-
uses: actions/cache@v4
24+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
2525
with:
2626
path: ~/.cache/pip
2727
key: pip-${{ runner.os }}-${{ hashFiles('pyproject.toml') }}
2828
restore-keys: |
2929
pip-${{ runner.os }}
3030
3131
- name: Set up Python ${{ inputs.version }}
32-
uses: actions/setup-python@v5
32+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
3333
with:
3434
python-version: ${{ inputs.version }}
3535
# TODO consider re-adding this and/or removing the pip cache

‎.github/workflows/build.yml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
FULL_RUN: ${{ steps.setuppush.outputs.FULL_RUN || steps.setuppr.outputs.FULL_RUN || steps.setupmanual.outputs.FULL_RUN || steps.setupschedule.outputs.FULL_RUN }}
7373
steps:
7474
- name: Checkout
75-
uses: actions/checkout@v6
75+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
7676
with:
7777
# for pull_request so we can do HEAD^2
7878
fetch-depth: 2
@@ -159,7 +159,7 @@ jobs:
159159

160160
steps:
161161
- name: Checkout
162-
uses: actions/checkout@v6
162+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
163163
with:
164164
submodules: recursive
165165

@@ -239,7 +239,7 @@ jobs:
239239

240240
steps:
241241
- name: Checkout
242-
uses: actions/checkout@v6
242+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
243243
with:
244244
submodules: recursive
245245
fetch-depth: 0
@@ -295,28 +295,28 @@ jobs:
295295
run: make dist-check
296296

297297
- name: Upload Wheel
298-
uses: actions/upload-artifact@v7
298+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
299299
with:
300300
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-3.10
301301
path: dist/*.whl
302302
if: ${{ matrix.cibuildwheel == 'cp310' }}
303303

304304
- name: Upload Wheel
305-
uses: actions/upload-artifact@v7
305+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
306306
with:
307307
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-3.11
308308
path: dist/*.whl
309309
if: ${{ matrix.cibuildwheel == 'cp311' }}
310310

311311
- name: Upload Wheel
312-
uses: actions/upload-artifact@v7
312+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
313313
with:
314314
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-3.12
315315
path: dist/*.whl
316316
if: ${{ matrix.cibuildwheel == 'cp312' }}
317317

318318
- name: Upload Wheel
319-
uses: actions/upload-artifact@v7
319+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
320320
with:
321321
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-3.13
322322
path: dist/*.whl
@@ -358,7 +358,7 @@ jobs:
358358

359359
steps:
360360
- name: Checkout
361-
uses: actions/checkout@v6
361+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
362362
with:
363363
submodules: recursive
364364

@@ -377,7 +377,7 @@ jobs:
377377
run: make dist-check
378378

379379
- name: Upload SDist
380-
uses: actions/upload-artifact@v7
380+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
381381
with:
382382
name: csp-sdist
383383
path: dist/*.tar.gz
@@ -417,7 +417,7 @@ jobs:
417417
##############################################
418418
# Things to exclude if not a full matrix run #
419419
##############################################
420-
420+
421421
# Avoid extra resources for windows build
422422
- is-full-run: false
423423
os: windows-2022
@@ -448,7 +448,7 @@ jobs:
448448

449449
steps:
450450
- name: Checkout
451-
uses: actions/checkout@v6
451+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
452452
with:
453453
submodules: recursive
454454

@@ -462,7 +462,7 @@ jobs:
462462
run: make requirements
463463

464464
- name: Download wheel
465-
uses: actions/download-artifact@v8
465+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
466466
with:
467467
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-${{ matrix.python-version }}
468468

@@ -554,7 +554,7 @@ jobs:
554554

555555
steps:
556556
- name: Checkout
557-
uses: actions/checkout@v6
557+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
558558
with:
559559
submodules: recursive
560560

@@ -573,7 +573,7 @@ jobs:
573573
- name: Install requirements
574574
run: sudo make dependencies-debian
575575

576-
- uses: actions/download-artifact@v8
576+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
577577
with:
578578
name: csp-sdist
579579
path: dist/
@@ -638,7 +638,7 @@ jobs:
638638

639639
steps:
640640
- name: Checkout
641-
uses: actions/checkout@v6
641+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
642642
with:
643643
submodules: recursive
644644
fetch-depth: 0
@@ -657,7 +657,7 @@ jobs:
657657
run: sudo apt-get install graphviz
658658

659659
- name: Download wheel
660-
uses: actions/download-artifact@v8
660+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
661661
with:
662662
name: csp-dist-${{ runner.os }}-${{ runner.arch }}-${{ matrix.python-version }}
663663

@@ -737,7 +737,7 @@ jobs:
737737

738738
steps:
739739
- name: Download wheels and sdist
740-
uses: actions/download-artifact@v8
740+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
741741
with:
742742
name:
743743
merge-multiple: true
@@ -747,7 +747,7 @@ jobs:
747747
run: ls -R ./dist
748748

749749
- name: Publish to github releases
750-
uses: softprops/action-gh-release@v3
750+
uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
751751
with:
752752
draft: true
753753
generate_release_notes: true

‎.github/workflows/conda.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -76,9 +76,9 @@ jobs:
7676
runs-on: ${{ matrix.os }}
7777
steps:
7878
- name: Checkout
79-
uses: actions/checkout@v6
79+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
8080

81-
- uses: mamba-org/setup-micromamba@v3
81+
- uses: mamba-org/setup-micromamba@d7c9bd84e824b79d2af72a2d4196c7f4300d3476 # v3.0.0
8282
with:
8383
micromamba-version: '2.3.2-0'
8484
environment-file: conda/dev-environment-unix.yml
@@ -89,7 +89,7 @@ jobs:
8989
post-cleanup: 'all'
9090
if: ${{ runner.os != 'Windows' }}
9191

92-
- uses: mamba-org/setup-micromamba@v3
92+
- uses: mamba-org/setup-micromamba@d7c9bd84e824b79d2af72a2d4196c7f4300d3476 # v3.0.0
9393
with:
9494
micromamba-version: '2.3.2-0'
9595
environment-file: conda/dev-environment-win.yml

‎.github/workflows/wiki-lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@v6
33+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3434
with:
3535
submodules: recursive
3636

‎.github/workflows/wiki-publish.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,9 +21,9 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@v6
24+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2525

2626
- name: Upload Documentation to Wiki
27-
uses: Andrew-Chen-Wang/github-wiki-action@v5
27+
uses: Andrew-Chen-Wang/github-wiki-action@4e78882ff52f8751488e506e49b221145506ee34 # v5.0.5
2828
with:
2929
path: docs/wiki

0 commit comments

Comments
 (0)