Skip to content

Commit 9509f7d

Browse files
davidkna-sapdavidkna-sap
authored
chore(deps): Pin action digests in workflow files (#6496)
1 parent 320c4db commit 9509f7d

File tree

14 files changed

+63
-61
lines changed

14 files changed

+63
-61
lines changed

‎.github/workflows/api-docs.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ jobs:
1818
generate-and-push-docs:
1919
runs-on: ubuntu-latest
2020
steps:
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222

2323
- run: git fetch --depth=1
2424

25-
- uses: actions/setup-node@v6
25+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2626
with:
2727
node-version: 22
2828
cache: 'yarn'
@@ -34,10 +34,10 @@ jobs:
3434
yarn generate
3535
yarn doc
3636
37-
- uses: actions/create-github-app-token@v3
37+
- uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
3838
id: app-token
3939
with:
40-
app-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
40+
client-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
4141
private-key: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}
4242
owner: SAP
4343
repositories: cloud-sdk

‎.github/workflows/auto-dependabot-fix.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,21 +8,21 @@ jobs:
88
if: github.actor == 'dependabot[bot]' && !github.event.pull_request.head.repo.fork
99
runs-on: ubuntu-latest
1010
steps:
11-
- uses: actions/create-github-app-token@v3
11+
- uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
1212
id: app-token
1313
with:
14-
app-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
14+
client-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
1515
private-key: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}
1616
owner: SAP
1717
repositories: cloud-sdk-js
1818
permission-contents: write
19-
- uses: actions/checkout@v6
19+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2020
with:
2121
fetch-depth: 0
2222
ref: ${{ github.event.pull_request.head.ref }}
2323
token: ${{ steps.app-token.outputs.token }}
2424
- run: git fetch --depth=1
25-
- uses: actions/setup-node@v6
25+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2626
with:
2727
node-version: 22
2828
cache: 'yarn'

‎.github/workflows/auto-lint.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,21 +8,21 @@ jobs:
88
if: github.actor != 'dependabot[bot]' && !github.event.pull_request.head.repo.fork
99
runs-on: ubuntu-latest
1010
steps:
11-
- uses: actions/create-github-app-token@v3
11+
- uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
1212
id: app-token
1313
with:
14-
app-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
14+
client-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
1515
private-key: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}
1616
owner: SAP
1717
repositories: cloud-sdk-js
1818
permission-contents: write
19-
- uses: actions/checkout@v6
19+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2020
with:
2121
fetch-depth: 0
2222
ref: ${{ github.event.pull_request.head.ref }}
2323
token: ${{ steps.app-token.outputs.token }}
2424
- run: git fetch --depth=1
25-
- uses: actions/setup-node@v6
25+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2626
with:
2727
node-version: 22
2828
cache: 'yarn'

‎.github/workflows/blackduck.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,9 @@ jobs:
1010
runs-on: ubuntu-latest
1111
timeout-minutes: 15
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
- run: git fetch --depth=1
15-
- uses: actions/setup-node@v6
15+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1616
with:
1717
node-version: 22
1818
cache: 'yarn'
@@ -34,7 +34,7 @@ jobs:
3434
DETECT_YARN_DEPENDENCY_TYPES_EXCLUDED: NON_PRODUCTION
3535
- if: failure() || cancelled()
3636
name: Slack Notify
37-
uses: rtCamp/action-slack-notify@v2.3.3
37+
uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
3838
env:
3939
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
4040
SLACK_USERNAME: SDK Pipeline Bot

‎.github/workflows/build.yml‎

Lines changed: 23 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,9 @@ jobs:
3131
matrix:
3232
node-version: [20, 22]
3333
steps:
34-
- uses: actions/checkout@v6
34+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3535
- run: git fetch --depth=1
36-
- uses: actions/setup-node@v6
36+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3737
with:
3838
node-version: ${{ matrix.node-version }}
3939
cache: 'yarn'
@@ -47,7 +47,7 @@ jobs:
4747
- run: yarn test:type
4848
- if: ${{ github.event_name != 'pull_request' && (failure() || cancelled()) }}
4949
name: Slack Notify
50-
uses: rtCamp/action-slack-notify@v2.3.3
50+
uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
5151
env:
5252
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
5353
SLACK_USERNAME: SDK Pipeline Bot
@@ -62,14 +62,14 @@ jobs:
6262
if: inputs.canary-release-skip-checks == false
6363
runs-on: ubuntu-latest
6464
steps:
65-
- uses: actions/checkout@v6
65+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6666
- run: git fetch --depth=1
67-
- uses: actions/setup-node@v6
67+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
6868
with:
6969
node-version: 22
7070
cache: 'yarn'
7171
- name: REUSE Compliance Check
72-
uses: fsfe/reuse-action@v6
72+
uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
7373
- run: yarn install --frozen-lockfile --ignore-engines
7474
- run: yarn lint
7575
name: Static Code Check
@@ -92,7 +92,7 @@ jobs:
9292
name: License Check
9393
- if: ${{ github.event_name != 'pull_request' && (failure() || cancelled()) }}
9494
name: Slack Notify
95-
uses: rtCamp/action-slack-notify@v2.3.3
95+
uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
9696
env:
9797
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
9898
SLACK_USERNAME: SDK Pipeline Bot
@@ -107,9 +107,9 @@ jobs:
107107
if: inputs.canary-release-skip-checks == false
108108
runs-on: ubuntu-latest
109109
steps:
110-
- uses: actions/checkout@v6
110+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
111111
- run: git fetch --depth=1
112-
- uses: actions/setup-node@v6
112+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
113113
with:
114114
node-version: 22
115115
cache: 'yarn'
@@ -126,7 +126,7 @@ jobs:
126126
steps:
127127
- name: Dependabot metadata
128128
id: metadata
129-
uses: dependabot/fetch-metadata@v3.0.0
129+
uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0
130130
with:
131131
github-token: '${{ secrets.GITHUB_TOKEN }}'
132132
- name: Approve a PR
@@ -151,7 +151,7 @@ jobs:
151151
REF_NAME: ${{ github.ref_name }}
152152
REF: ${{ github.ref }}
153153
steps:
154-
- uses: actions/checkout@v6
154+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
155155
- run: git fetch --depth=1
156156
- id: date-check
157157
name: Check if latest commit is within 24 hrs
@@ -178,9 +178,9 @@ jobs:
178178
permissions:
179179
id-token: write
180180
steps:
181-
- uses: actions/checkout@v6
181+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
182182
- run: git fetch --depth=1
183-
- uses: actions/setup-node@v6
183+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
184184
with:
185185
node-version: 24 # Will install npm 11 needed for trusted publishing
186186
cache: 'yarn'
@@ -200,21 +200,23 @@ jobs:
200200
runs-on: ubuntu-latest
201201
needs: [tests, checks]
202202
steps:
203-
- uses: actions/checkout@v6
203+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
204204
- run: git fetch --depth=1
205-
- uses: actions/setup-node@v6
205+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
206206
with:
207207
node-version: 22
208208
cache: 'yarn'
209209
- run: yarn install --frozen-lockfile --ignore-engines
210210
- uses: ./.github/actions/get-changelog
211211
name: Get Changelog
212212
id: get-changelog
213-
- uses: actions/create-release@latest
213+
- name: Create Release
214214
env:
215215
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
216-
with:
217-
tag_name: ${{ github.ref }}
218-
release_name: ${{ github.ref }}
219-
draft: true
220-
body: ${{ steps.get-changelog.outputs.changelog }}
216+
CHANGELOG: ${{ steps.get-changelog.outputs.changelog }}
217+
run: |
218+
gh release create "${{ github.ref_name }}" \
219+
--title "${{ github.ref_name }}" \
220+
--verify-tag \
221+
--notes "$CHANGELOG" \
222+
--draft

‎.github/workflows/bump.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,20 +13,20 @@ jobs:
1313
outputs:
1414
version: ${{ steps.bump.outputs.version }}
1515
steps:
16-
- uses: actions/create-github-app-token@v3
16+
- uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
1717
id: app-token
1818
with:
19-
app-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
19+
client-id: ${{ secrets.SAP_CLOUD_SDK_BOT_CLIENT_ID }}
2020
private-key: ${{ secrets.SAP_CLOUD_SDK_BOT_PRIVATE_KEY }}
2121
owner: SAP
2222
repositories: cloud-sdk-js
2323
permission-contents: write
24-
- uses: actions/checkout@v6
24+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2525
with:
2626
token: ${{ steps.app-token.outputs.token }}
2727
ref: 'main'
2828

29-
- uses: actions/setup-node@v6
29+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3030
with:
3131
node-version: 22
3232
cache: 'yarn'

‎.github/workflows/check-pr.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ jobs:
1111
check-pr:
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v6
14+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1515
- name: Collect changed files
16-
uses: step-security/changed-files@v47.0.5
16+
uses: step-security/changed-files@2e07db73e5ccdb319b9a6c7766bd46d39d304bad # v47.0.5
1717
id: changed-files
1818
with:
1919
files: |

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,15 +30,15 @@ jobs:
3030

3131
steps:
3232
- name: Checkout repository
33-
uses: actions/checkout@v6
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434
with:
3535
# We must fetch at least the immediate parents so that if this is
3636
# a pull request then we can checkout the head.
3737
fetch-depth: 2
3838

3939
# Initializes the CodeQL tools for scanning.
4040
- name: Initialize CodeQL
41-
uses: github/codeql-action/init@v4
41+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
4242
with:
4343
languages: ${{ matrix.language }}
4444
config-file: ./.github/codeql/codeql-config.yml
@@ -50,7 +50,7 @@ jobs:
5050
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5151
# If this step fails, then you should remove it and run the build manually (see below)
5252
- name: Autobuild
53-
uses: github/codeql-action/autobuild@v4
53+
uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
5454

5555
# ℹ️ Command-line programs to run using the OS shell.
5656
# 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
6464
# make release
6565

6666
- name: Perform CodeQL Analysis
67-
uses: github/codeql-action/analyze@v4
67+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

‎.github/workflows/downloads.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,9 +9,9 @@ jobs:
99
downloads:
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/checkout@v6
12+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1313
- run: git fetch --depth=1
14-
- uses: actions/setup-node@v6
14+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1515
with:
1616
node-version: 22
1717
cache: 'yarn'

‎.github/workflows/fosstars-report.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,14 +11,14 @@ jobs:
1111
permissions:
1212
contents: write
1313
steps:
14-
- uses: actions/checkout@v6
15-
- uses: SAP/fosstars-rating-core-action@v1.14.0
14+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
15+
- uses: SAP/fosstars-rating-core-action@daf10c3920b53405f6013ee987e7015525fdec30 # v1.14.0
1616
with:
1717
report-branch: fosstars-report
1818
token: ${{ secrets.GITHUB_TOKEN }}
1919
- if: failure() || cancelled()
2020
name: Slack Notify
21-
uses: rtCamp/action-slack-notify@v2.3.3
21+
uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
2222
env:
2323
SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
2424
SLACK_USERNAME: SDK Pipeline Bot

0 commit comments

Comments
 (0)