1818 runs-on : ubuntu-22.04
1919 timeout-minutes : 3
2020 steps :
21- - uses : styfle/cancel-workflow-action@0 .13.0
21+ - uses : styfle/cancel-workflow-action@d07a454dad7609a92316b57b23c9ccfd4f59af66 # v0 .13.1
2222 with :
2323 access_token : ${{ secrets.GITHUB_TOKEN }}
2424 all_but_latest : true # can cancel workflows scheduled later
3131 SCCACHE_GHA_ENABLED : " true"
3232 RUSTC_WRAPPER : " sccache"
3333 steps :
34- - uses : actions/checkout@v6.0.2
34+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3535
3636 # Install protobuf compiler for linux. The versions bundled with Ubuntu
3737 # 20.04 and 22.04 are too old -- our messages require protobuf >= 3.15 --
@@ -44,10 +44,10 @@ jobs:
4444 unzip "protoc-${{ env.PB_VERSION }}-${{ env.PB_TARGET }}.zip" -d "$HOME/.local"
4545 export PATH="$PATH:$HOME/.local/bin"
4646
47- - uses : actions-rust-lang/setup-rust-toolchain@v1.15.3
47+ - uses : actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
4848 with :
4949 cache : false
50- - uses : mozilla-actions/sccache-action@v0.0.9
50+ - uses : mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
5151 - working-directory : bottlecap
5252 run : cargo check --workspace
5353
5959 SCCACHE_GHA_ENABLED : " true"
6060 RUSTC_WRAPPER : " sccache"
6161 steps :
62- - uses : actions/checkout@v6.0.2
62+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6363
6464 # Install protobuf compiler for linux. The versions bundled with Ubuntu
6565 # 20.04 and 22.04 are too old -- our messages require protobuf >= 3.15 --
@@ -72,11 +72,11 @@ jobs:
7272 unzip "protoc-${{ env.PB_VERSION }}-${{ env.PB_TARGET }}.zip" -d "$HOME/.local"
7373 export PATH="$PATH:$HOME/.local/bin"
7474
75- - uses : actions-rust-lang/setup-rust-toolchain@v1.15.3
75+ - uses : actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
7676 with :
7777 components : clippy
7878 cache : false
79- - uses : mozilla-actions/sccache-action@v0.0.9
79+ - uses : mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
8080 # We need to do these separately because the fips feature is incompatible with the default feature.
8181 - working-directory : bottlecap
8282 run : cargo clippy --workspace --all-targets --features default
9191 SCCACHE_GHA_ENABLED : " true"
9292 RUSTC_WRAPPER : " sccache"
9393 steps :
94- - uses : actions/checkout@v6.0.2
94+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9595
9696 # Install protobuf compiler for linux. The versions bundled with Ubuntu
9797 # 20.04 and 22.04 are too old -- our messages require protobuf >= 3.15 --
@@ -104,10 +104,10 @@ jobs:
104104 unzip "protoc-${{ env.PB_VERSION }}-${{ env.PB_TARGET }}.zip" -d "$HOME/.local"
105105 export PATH="$PATH:$HOME/.local/bin"
106106
107- - uses : actions-rust-lang/setup-rust-toolchain@v1.15.3
107+ - uses : actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
108108 with :
109109 cache : false
110- - uses : mozilla-actions/sccache-action@v0.0.9
110+ - uses : mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
111111 - working-directory : bottlecap
112112 run : cargo build --all
113113
@@ -119,7 +119,7 @@ jobs:
119119 SCCACHE_GHA_ENABLED : " true"
120120 RUSTC_WRAPPER : " sccache"
121121 steps :
122- - uses : actions/checkout@v6.0.2
122+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
123123
124124 # Install protobuf compiler for linux. The versions bundled with Ubuntu
125125 # 20.04 and 22.04 are too old -- our messages require protobuf >= 3.15 --
@@ -132,13 +132,13 @@ jobs:
132132 unzip "protoc-${{ env.PB_VERSION }}-${{ env.PB_TARGET }}.zip" -d "$HOME/.local"
133133 export PATH="$PATH:$HOME/.local/bin"
134134
135- - uses : actions-rust-lang/setup-rust-toolchain@v1.15.3
135+ - uses : actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
136136 with :
137137 cache : false
138- - uses : taiki-e/install-action@v2
138+ - uses : taiki-e/install-action@cbb1dcaa26e1459e2876c39f61c1e22a1258aac5 # v2.68.33
139139 with :
140140 tool : nextest@0.9
141- - uses : mozilla-actions/sccache-action@v0.0.9
141+ - uses : mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
142142 - working-directory : bottlecap
143143 run : cargo nextest run --workspace
144144
@@ -149,8 +149,8 @@ jobs:
149149 matrix :
150150 os : [ubuntu-22.04, macos-latest]
151151 steps :
152- - uses : actions/checkout@v6.0.2
153- - uses : actions-rust-lang/setup-rust-toolchain@v1.15.3
152+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
153+ - uses : actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
154154 with :
155155 components : rustfmt
156156 cache : false
@@ -163,7 +163,7 @@ jobs:
163163 name : " Valid LICENSE-3rdparty.csv"
164164 steps :
165165 - name : Checkout sources
166- uses : actions/checkout@v6.0.2
166+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
167167 - run : cargo install dd-rust-license-tool --locked
168168 - run : dd-rust-license-tool check
169169 working-directory : bottlecap
@@ -176,7 +176,7 @@ jobs:
176176 checks : write
177177 steps :
178178 - name : Checkout repository
179- uses : actions/checkout@v6.0.2
179+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180180 - name : Scan Rust dependencies with cargo-audit
181181 uses : rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
182182 with :
0 commit comments