Skip to content

Commit bfc4a89

Browse files
PiccirelloPiccirello
authored
chore: pin github actions to commit shas (#2278)
1 parent 5047156 commit bfc4a89

9 files changed

Lines changed: 37 additions & 37 deletions

File tree

‎.github/workflows/agent-release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,15 @@ jobs:
1818
id-token: write
1919
steps:
2020
- name: Checkout repository
21-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
21+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
with:
2323
persist-credentials: false
2424

2525
- name: Setup pnpm
26-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
26+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
2727

2828
- name: Set up Node 24
29-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
29+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
3030
with:
3131
node-version: 24
3232
cache: "pnpm"

‎.github/workflows/agent-tag.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,13 +21,13 @@ jobs:
2121
steps:
2222
- name: Get app token
2323
id: app-token
24-
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3
24+
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3.0.0
2525
with:
2626
app_id: ${{ secrets.GH_APP_ARRAY_RELEASER_APP_ID }}
2727
private_key: ${{ secrets.GH_APP_ARRAY_RELEASER_PRIVATE_KEY }}
2828

2929
- name: Checkout
30-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3131
with:
3232
fetch-depth: 0
3333
token: ${{ steps.app-token.outputs.token }}

‎.github/workflows/build.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
persist-credentials: false
2020

2121
- name: Setup pnpm
22-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
22+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
2323

2424
- name: Setup Node.js
25-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
25+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2626
with:
2727
node-version: 22
2828
cache: "pnpm"

‎.github/workflows/code-quality.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
persist-credentials: false
2020

2121
- name: Setup Biome
22-
uses: biomejs/setup-biome@29711cbb52afee00eb13aeb30636592f9edc0088 # v2
22+
uses: biomejs/setup-biome@29711cbb52afee00eb13aeb30636592f9edc0088 # v2.7.0
2323

2424
- name: Run Biome
2525
run: biome ci .

‎.github/workflows/code-release.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -33,23 +33,23 @@ jobs:
3333
steps:
3434
- name: Get app token
3535
id: app-token
36-
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3
36+
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3.0.0
3737
with:
3838
app_id: ${{ secrets.GH_APP_ARRAY_RELEASER_APP_ID }}
3939
private_key: ${{ secrets.GH_APP_ARRAY_RELEASER_PRIVATE_KEY }}
4040

4141
- name: Checkout
42-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
42+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
fetch-depth: 0
4545
token: ${{ steps.app-token.outputs.token }}
4646
persist-credentials: false
4747

4848
- name: Setup pnpm
49-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
49+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
5050

5151
- name: Setup Node.js
52-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
52+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
5353
with:
5454
node-version: 22
5555
cache: "pnpm"
@@ -72,7 +72,7 @@ jobs:
7272
run: pnpm install --frozen-lockfile
7373

7474
- name: Configure AWS credentials
75-
uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
75+
uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
7676
with:
7777
role-to-assume: ${{ secrets.AWS_TWIG_APP_ASSETS_ROLE_ARN }}
7878
aws-region: ${{ secrets.AWS_TWIG_APP_ASSETS_REGION }}
@@ -143,23 +143,23 @@ jobs:
143143
steps:
144144
- name: Get app token
145145
id: app-token
146-
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3
146+
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3.0.0
147147
with:
148148
app_id: ${{ secrets.GH_APP_ARRAY_RELEASER_APP_ID }}
149149
private_key: ${{ secrets.GH_APP_ARRAY_RELEASER_PRIVATE_KEY }}
150150

151151
- name: Checkout
152-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
152+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
153153
with:
154154
fetch-depth: 0
155155
token: ${{ steps.app-token.outputs.token }}
156156
persist-credentials: false
157157

158158
- name: Setup pnpm
159-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
159+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
160160

161161
- name: Setup Node.js
162-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
162+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
163163
with:
164164
node-version: 22
165165
cache: "pnpm"
@@ -219,7 +219,7 @@ jobs:
219219
steps:
220220
- name: Get app token
221221
id: app-token
222-
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3
222+
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3.0.0
223223
with:
224224
app_id: ${{ secrets.GH_APP_ARRAY_RELEASER_APP_ID }}
225225
private_key: ${{ secrets.GH_APP_ARRAY_RELEASER_PRIVATE_KEY }}

‎.github/workflows/code-tag.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,13 +30,13 @@ jobs:
3030
steps:
3131
- name: Get app token
3232
id: app-token
33-
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3
33+
uses: getsentry/action-github-app-token@d4b5da6c5e37703f8c3b3e43abb5705b46e159cc # v3.0.0
3434
with:
3535
app_id: ${{ secrets.GH_APP_ARRAY_RELEASER_APP_ID }}
3636
private_key: ${{ secrets.GH_APP_ARRAY_RELEASER_PRIVATE_KEY }}
3737

3838
- name: Checkout
39-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
39+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4040
with:
4141
fetch-depth: 0
4242
token: ${{ steps.app-token.outputs.token }}

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -49,16 +49,16 @@ jobs:
4949
build-mode: none
5050
steps:
5151
- name: Checkout repository
52-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
52+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5353

5454
# Initializes the CodeQL tools for scanning.
5555
- name: Initialize CodeQL
56-
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4
56+
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
5757
with:
5858
languages: ${{ matrix.language }}
5959
build-mode: ${{ matrix.build-mode }}
6060

6161
- name: Perform CodeQL Analysis
62-
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4
62+
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
6363
with:
6464
category: "/language:${{matrix.language}}"

‎.github/workflows/test.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
persist-credentials: false
2020

2121
- name: Setup pnpm
22-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
22+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
2323

2424
- name: Setup Node.js
25-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
25+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2626
with:
2727
node-version: 22
2828
cache: "pnpm"
@@ -42,21 +42,21 @@ jobs:
4242
contents: read
4343
steps:
4444
- name: Checkout
45-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
45+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4646
with:
4747
persist-credentials: false
4848

4949
- name: Setup pnpm
50-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
50+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
5151

5252
- name: Setup Node.js
53-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
53+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
5454
with:
5555
node-version: 22
5656
cache: "pnpm"
5757

5858
- name: Cache Playwright browsers
59-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
59+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
6060
id: playwright-cache
6161
with:
6262
path: ~/Library/Caches/ms-playwright
@@ -65,7 +65,7 @@ jobs:
6565
playwright-${{ runner.os }}-
6666
6767
- name: Cache Electron binary
68-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
68+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
6969
with:
7070
path: ~/Library/Caches/electron
7171
key: electron-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
@@ -103,7 +103,7 @@ jobs:
103103
CI: true
104104

105105
- name: Upload Playwright report
106-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
106+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
107107
if: failure()
108108
with:
109109
name: playwright-report

‎.github/workflows/typecheck.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
persist-credentials: false
2020

2121
- name: Setup pnpm
22-
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
22+
uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
2323

2424
- name: Setup Node.js
25-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
25+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2626
with:
2727
node-version: 22
2828
cache: "pnpm"

0 commit comments

Comments
 (0)