2525
2626 steps :
2727 - name : Checkout
28- uses : actions/checkout@v4
28+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2929
3030 - name : Validate Python lockfile
3131 shell : bash
4141 echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
4242
4343 - name : Setup Python and dependencies
44- uses : actions/setup-python@v5
44+ uses : actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4545 with :
4646 python-version : " 3.12"
4747 cache : " pip"
6464
6565 steps :
6666 - name : Checkout
67- uses : actions/checkout@v4
67+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
6868
6969 - name : Validate Python lockfile
7070 shell : bash
8080 echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
8181
8282 - name : Setup Python and dependencies
83- uses : actions/setup-python@v5
83+ uses : actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
8484 with :
8585 python-version : " 3.12"
8686 cache : " pip"
@@ -119,7 +119,7 @@ jobs:
119119
120120 steps :
121121 - name : Checkout
122- uses : actions/checkout@v4
122+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
123123
124124 - name : Install system dependencies
125125 run : |
@@ -141,14 +141,14 @@ jobs:
141141 echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
142142
143143 - name : Setup vcpkg
144- uses : lukka/run-vcpkg@v11
144+ uses : lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
145145 with :
146146 vcpkgGitCommitId : ${{ env.VCPKG_COMMIT }}
147147 doNotCache : false
148148
149149 - name : Install Python integration deps
150150 if : ${{ matrix.grpc_integration }}
151- uses : actions/setup-python@v5
151+ uses : actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
152152 with :
153153 python-version : " 3.12"
154154 cache : " pip"
@@ -181,15 +181,15 @@ jobs:
181181
182182 steps :
183183 - name : Checkout
184- uses : actions/checkout@v4
184+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
185185
186186 - name : Install system dependencies
187187 run : |
188188 sudo apt-get update
189189 sudo apt-get install -y ninja-build g++ python3
190190
191191 - name : Setup vcpkg
192- uses : lukka/run-vcpkg@v11
192+ uses : lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
193193 with :
194194 vcpkgGitCommitId : ${{ env.VCPKG_COMMIT }}
195195 doNotCache : false
@@ -207,7 +207,7 @@ jobs:
207207 echo "out_dir=$OUT_DIR" >> "$GITHUB_OUTPUT"
208208
209209 - name : Upload strict-dimensional artifacts
210- uses : actions/upload-artifact@v4
210+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
211211 with :
212212 name : strict-dimensional-validation-${{ github.run_id }}-${{ github.run_attempt }}
213213 path : ${{ steps.dimensional.outputs.out_dir }}
@@ -219,10 +219,10 @@ jobs:
219219
220220 steps :
221221 - name : Checkout
222- uses : actions/checkout@v4
222+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
223223
224224 - name : Setup vcpkg
225- uses : lukka/run-vcpkg@v11
225+ uses : lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
226226 with :
227227 vcpkgGitCommitId : ${{ env.VCPKG_COMMIT }}
228228 doNotCache : false
@@ -242,10 +242,10 @@ jobs:
242242
243243 steps :
244244 - name : Checkout
245- uses : actions/checkout@v4
245+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
246246
247247 - name : Setup vcpkg
248- uses : lukka/run-vcpkg@v11
248+ uses : lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
249249 with :
250250 vcpkgGitCommitId : ${{ env.VCPKG_COMMIT }}
251251 doNotCache : false
@@ -265,15 +265,15 @@ jobs:
265265
266266 steps :
267267 - name : Checkout
268- uses : actions/checkout@v4
268+ uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
269269
270270 - name : Install system dependencies
271271 run : |
272272 sudo apt-get update
273273 sudo apt-get install -y ninja-build g++ graphviz
274274
275275 - name : Setup vcpkg
276- uses : lukka/run-vcpkg@v11
276+ uses : lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
277277 with :
278278 vcpkgGitCommitId : ${{ env.VCPKG_COMMIT }}
279279 doNotCache : false
@@ -293,7 +293,7 @@ jobs:
293293 test -s "$OUT"
294294
295295 version-sync :
296- uses : anolishq/.github/.github/workflows/version-sync.yml@main
296+ uses : anolishq/.github/.github/workflows/version-sync.yml@15f6901a9ef7e845841d371a64addb04b0f7755a # main
297297 with :
298298 python-version : ' 3.12'
299299 working-directory : ' .'
0 commit comments