3838 contents : write
3939
4040 steps :
41- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
41+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
4242 with :
4343 disable-sudo : true
4444 egress-policy : audit
5050 python-version : ${{ matrix.python-version }}
5151 cache : pip
5252
53- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
53+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
5454
5555 - if : matrix.resolution != 'limited-dependencies'
5656 continue-on-error : ${{ contains(matrix.python-version, '3.14') }}
8989 continue-on-error : ${{ contains(matrix.python-version, '3.14') }}
9090 run : uv run pytest
9191
92- - uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
92+ - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
9393 if : ${{ !contains(matrix.python-version, '3.14') }}
9494 with :
9595 name : coverage-${{ matrix.os }}-${{ matrix.python-version }}-${{ matrix.resolution }}
@@ -103,7 +103,7 @@ jobs:
103103 extras : ${{ steps.get-extras.outputs.extras }}
104104
105105 steps :
106- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
106+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
107107 with :
108108 disable-sudo : true
109109 egress-policy : block
@@ -119,7 +119,7 @@ jobs:
119119 python-version : ' 3.13'
120120 cache : pip
121121
122- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
122+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
123123
124124 - run : >-
125125 uv sync
@@ -167,7 +167,7 @@ jobs:
167167 - highest
168168
169169 steps :
170- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
170+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
171171 with :
172172 disable-sudo : true
173173 egress-policy : block
@@ -183,7 +183,7 @@ jobs:
183183 python-version : ${{ matrix.python-version }}
184184 cache : pip
185185
186- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
186+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
187187
188188 - env :
189189 PARSONS_LIMITED_DEPENDENCIES : ' TRUE'
@@ -213,7 +213,7 @@ jobs:
213213 runs-on : ubuntu-latest
214214
215215 steps :
216- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
216+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
217217 with :
218218 disable-sudo : true
219219 egress-policy : block
@@ -229,7 +229,7 @@ jobs:
229229 python-version : ' 3.13'
230230 cache : pip
231231
232- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
232+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
233233
234234 - run : >-
235235 uv sync
@@ -259,7 +259,7 @@ jobs:
259259 security-events : write
260260
261261 steps :
262- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
262+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
263263 with :
264264 disable-sudo : true
265265 egress-policy : block
@@ -276,7 +276,7 @@ jobs:
276276 python-version : ' 3.13'
277277 cache : pip
278278
279- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
279+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
280280
281281 - run : >-
282282 uv sync
@@ -300,7 +300,7 @@ jobs:
300300 -o results.sarif
301301 .
302302
303- - uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e
303+ - uses : github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162
304304 if : ( success() || failure() ) && contains('["success", "failure"]', steps.run-ruff-sarif.outcome)
305305 with :
306306 sarif_file : results.sarif
@@ -320,7 +320,7 @@ jobs:
320320 security-events : write
321321
322322 steps :
323- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
323+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
324324 with :
325325 disable-sudo : true
326326 egress-policy : block
@@ -337,7 +337,7 @@ jobs:
337337 python-version : ' 3.13'
338338 cache : pip
339339
340- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
340+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
341341
342342 - run : >-
343343 uv sync
@@ -355,7 +355,7 @@ jobs:
355355 --format 'sarif'
356356 --output 'results.sarif'
357357
358- - uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e
358+ - uses : github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162
359359 if : ( success() || failure() ) && contains('["success", "failure"]', steps.run-bandit-sarif.outcome)
360360 with :
361361 sarif_file : results.sarif
@@ -380,7 +380,7 @@ jobs:
380380 contents : write
381381
382382 steps :
383- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
383+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
384384 with :
385385 disable-sudo : true
386386 egress-policy : block
@@ -391,7 +391,7 @@ jobs:
391391
392392 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
393393
394- - uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
394+ - uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3
395395 with :
396396 pattern : coverage-*
397397 merge-multiple : true
@@ -402,7 +402,7 @@ jobs:
402402 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
403403 MERGE_COVERAGE_FILES : true
404404
405- - uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
405+ - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
406406 if : steps.coverage_comment.outputs.COMMENT_FILE_WRITTEN == 'true'
407407 with :
408408 name : python-coverage-comment-action
@@ -420,7 +420,7 @@ jobs:
420420 contents : write
421421
422422 steps :
423- - uses : step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
423+ - uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
424424 with :
425425 disable-sudo : true
426426 egress-policy : block
@@ -437,7 +437,7 @@ jobs:
437437 python-version : ' 3.13'
438438 cache : pip
439439
440- - uses : install-pinned/uv@05d9162df91b0a72301801afd144d0b8b525e0b3
440+ - uses : install-pinned/uv@4d66dd6355704140c330bc2a2e6291cbf3bcb67f
441441
442442 - run : >-
443443 uv sync
0 commit comments