@@ -23,15 +23,15 @@ jobs:
2323 runs-on : u22-arm-runner
2424
2525 steps :
26- - uses : actions/checkout@v6
26+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2727 - name : Setup Elixir
2828 id : beam
29- uses : erlef/setup-beam@v1
29+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
3030 with :
3131 otp-version : ' 27.2.1'
3232 elixir-version : ' 1.18.2'
3333 - name : Cache Mix
34- uses : actions/cache@v5
34+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
3535 with :
3636 path : deps
3737 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
@@ -46,15 +46,15 @@ jobs:
4646 needs : [deps]
4747
4848 steps :
49- - uses : actions/checkout@v6
49+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5050 - name : Setup Elixir
5151 id : beam
52- uses : erlef/setup-beam@v1
52+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
5353 with :
5454 otp-version : ' 27.2.1'
5555 elixir-version : ' 1.18.2'
5656 - name : Cache Mix
57- uses : actions/cache@v5
57+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
5858 with :
5959 path : deps
6060 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
@@ -67,15 +67,15 @@ jobs:
6767 needs : [deps]
6868
6969 steps :
70- - uses : actions/checkout@v6
70+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7171 - name : Setup Elixir
7272 id : beam
73- uses : erlef/setup-beam@v1
73+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
7474 with :
7575 otp-version : ' 27.2.1'
7676 elixir-version : ' 1.18.2'
7777 - name : Cache Mix
78- uses : actions/cache@v5
78+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
7979 with :
8080 path : deps
8181 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
8484 - name : Credo checks
8585 run : mix credo --strict --all --mute-exit-status --format=sarif > results.sarif
8686 - name : Upload SARIF file
87- uses : github/codeql-action/upload-sarif@v3
87+ uses : github/codeql-action/upload-sarif@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 # v3.34.1
8888 with :
8989 sarif_file : results.sarif
9090 category : credo
@@ -96,26 +96,26 @@ jobs:
9696 env :
9797 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
9898 steps :
99- - uses : actions/checkout@v6
99+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
100100 - name : Set up Postgres
101101 run : docker-compose -f ./docker-compose.db.yml up -d
102102 - name : Setup Elixir
103103 id : beam
104- uses : erlef/setup-beam@v1
104+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
105105 with :
106106 otp-version : ' 27.2.1'
107107 elixir-version : ' 1.18.2'
108108 - name : Set up Rust
109- uses : dtolnay/rust-toolchain@v1
109+ uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
110110 with :
111111 toolchain : stable
112112 - name : Cache Mix
113- uses : actions/cache@v5
113+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
114114 with :
115115 path : deps
116116 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
117117 - name : Cache native
118- uses : actions/cache@v5
118+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
119119 with :
120120 path : |
121121 _build/${{ env.MIX_ENV }}/lib/supavisor/native
@@ -135,7 +135,7 @@ jobs:
135135 - name : Run tests
136136 run : mix coveralls.lcov
137137 - name : Upload Parallel Coverage Report
138- uses : coverallsapp/github-action@v2
138+ uses : coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
139139 with :
140140 flag-name : run-tests
141141 parallel : true
@@ -147,36 +147,36 @@ jobs:
147147 env :
148148 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
149149 steps :
150- - uses : actions/checkout@v6
150+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
151151 - name : Set up Postgres
152152 run : docker-compose -f ./docker-compose.db.yml up -d
153153 - name : Setup Elixir
154154 id : beam
155- uses : erlef/setup-beam@v1
155+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
156156 with :
157157 otp-version : ' 27.2.1'
158158 elixir-version : ' 1.18.2'
159- - uses : actions/setup-node@v6
159+ - uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
160160 with :
161161 node-version : ' lts/*'
162162 cache-dependency-path : ' test/integration/js/'
163- - uses : denoland/setup-deno@v2
163+ - uses : denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
164164 with :
165165 deno-version : ' v2.x'
166- - uses : oven-sh/setup-bun@v2
166+ - uses : oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
167167 with :
168168 bun-version : ' 1.3.6'
169169 - name : Set up Rust
170- uses : dtolnay/rust-toolchain@v1
170+ uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
171171 with :
172172 toolchain : stable
173173 - name : Cache Mix
174- uses : actions/cache@v5
174+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
175175 with :
176176 path : deps
177177 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
178178 - name : Cache native
179- uses : actions/cache@v5
179+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
180180 with :
181181 path : |
182182 _build/${{ env.MIX_ENV }}/lib/supavisor/native
@@ -205,7 +205,7 @@ jobs:
205205 - name : Run tests
206206 run : mix coveralls.lcov --only integration --trace
207207 - name : Upload Parallel Coverage Report
208- uses : coverallsapp/github-action@v2
208+ uses : coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
209209 with :
210210 flag-name : run-integration
211211 parallel : true
@@ -216,7 +216,7 @@ jobs:
216216 runs-on : ubuntu-latest
217217 steps :
218218 - name : Close parallel build
219- uses : coverallsapp/github-action@v2
219+ uses : coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
220220 with :
221221 parallel-finished : true
222222 carryforward : " run-tests,run-integration"
@@ -227,24 +227,24 @@ jobs:
227227 needs : [deps]
228228
229229 steps :
230- - uses : actions/checkout@v6
230+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
231231 - name : Setup Elixir
232232 id : beam
233- uses : erlef/setup-beam@v1
233+ uses : erlef/setup-beam@ee09b1e59bb240681c382eb1f0abc6a04af72764 # v1.23.0
234234 with :
235235 otp-version : ' 27.2.1'
236236 elixir-version : ' 1.18.2'
237237 - name : Set up Rust
238- uses : dtolnay/rust-toolchain@v1
238+ uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
239239 with :
240240 toolchain : stable
241241 - name : Cache Mix
242- uses : actions/cache@v5
242+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
243243 with :
244244 path : deps
245245 key : ${{ runner.os }}-mix-${{ hashFiles(format('{0}{1}', github.workspace, '/mix.lock')) }}
246246 - name : Cache native
247- uses : actions/cache@v5
247+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
248248 with :
249249 path : |
250250 _build/${{ env.MIX_ENV }}/lib/supavisor/native
@@ -260,7 +260,7 @@ jobs:
260260 - name : Compile
261261 run : mix compile
262262 - name : Retrieve PLT Cache
263- uses : actions/cache@v5
263+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
264264 id : plt-cache
265265 with :
266266 path : _build/${{ env.MIX_ENV }}/*.plt
0 commit comments