Skip to content

Commit 48c7fa9

Browse files
ndgrigorianndgrigorian
authored
Merge pull request #2255 from IntelPython/maint/use-sha-to-pin-actions
[MAINT] Use SHA to pin GitHub actions
2 parents 517fb17 + a5f9dec commit 48c7fa9

File tree

8 files changed

+55
-58
lines changed

8 files changed

+55
-58
lines changed

‎.github/workflows/conda-package.yml‎

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -31,15 +31,15 @@ jobs:
3131
with:
3232
access_token: ${{ github.token }}
3333

34-
- uses: actions/checkout@v6.0.2
34+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3535
with:
3636
fetch-depth: 0
3737

3838
- name: Set pkgs_dirs
3939
run: |
4040
echo "pkgs_dirs: [~/.conda/pkgs]" >> ~/.condarc
4141
- name: Cache conda packages
42-
uses: actions/cache@v5
42+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
4343
env:
4444
CACHE_NUMBER: 3 # Increase to reset cache
4545
with:
@@ -69,12 +69,12 @@ jobs:
6969
$CHANNELS \
7070
conda-recipe
7171
- name: Upload artifact
72-
uses: actions/upload-artifact@v6.0.0
72+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
7373
with:
7474
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
7575
path: /usr/share/miniconda/conda-bld/linux-64/${{ env.PACKAGE_NAME }}-*.conda
7676
- name: Upload wheels artifact
77-
uses: actions/upload-artifact@v6.0.0
77+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
7878
with:
7979
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Wheels Python ${{ matrix.python }}
8080
path: ${{ env.WHEELS_OUTPUT_FOLDER }}${{ env.PACKAGE_NAME }}-*.whl
@@ -92,11 +92,11 @@ jobs:
9292
with:
9393
access_token: ${{ github.token }}
9494

95-
- uses: actions/checkout@v6.0.2
95+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9696
with:
9797
fetch-depth: 0
9898

99-
- uses: conda-incubator/setup-miniconda@v3
99+
- uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3.3.0
100100
with:
101101
miniforge-variant: Miniforge3
102102
miniforge-version: latest
@@ -112,7 +112,7 @@ jobs:
112112
conda list -n base
113113
114114
- name: Cache conda packages
115-
uses: actions/cache@v5
115+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
116116
env:
117117
CACHE_NUMBER: 3 # Increase to reset cache
118118
with:
@@ -137,13 +137,13 @@ jobs:
137137
conda build --no-test --python ${{ matrix.python }} --numpy 2.0 -c ${{ env.INTEL_CHANNEL }} -c conda-forge --override-channels conda-recipe
138138
139139
- name: Upload artifact
140-
uses: actions/upload-artifact@v6.0.0
140+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
141141
with:
142142
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
143143
path: ${{ env.CONDA_BLD }}${{ env.PACKAGE_NAME }}-*.conda
144144

145145
- name: Upload wheels artifact
146-
uses: actions/upload-artifact@v6.0.0
146+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
147147
with:
148148
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Wheels Python ${{ matrix.python }}
149149
path: ${{ env.WHEELS_OUTPUT_FOLDER }}${{ env.PACKAGE_NAME }}-*.whl
@@ -168,7 +168,7 @@ jobs:
168168
run: |
169169
echo ${{ env.CHANNELS }}
170170
- name: Download artifact
171-
uses: actions/download-artifact@v7
171+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
172172
with:
173173
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
174174
- name: Add conda to system path
@@ -197,7 +197,7 @@ jobs:
197197
run: |
198198
echo "pkgs_dirs: [~/.conda/pkgs]" >> ~/.condarc
199199
- name: Cache conda packages
200-
uses: actions/cache@v5
200+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
201201
env:
202202
CACHE_NUMBER: 3 # Increase to reset cache
203203
with:
@@ -269,11 +269,11 @@ jobs:
269269
echo ${{ env.CHANNELS }}
270270
271271
- name: Download artifact
272-
uses: actions/download-artifact@v7
272+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
273273
with:
274274
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
275275

276-
- uses: conda-incubator/setup-miniconda@v3
276+
- uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3.3.0
277277
with:
278278
miniforge-version: latest
279279
channels: conda-forge
@@ -335,7 +335,7 @@ jobs:
335335
run: Get-Content -Path .\lockfile
336336

337337
- name: Cache conda packages
338-
uses: actions/cache@v5
338+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
339339
env:
340340
CACHE_NUMBER: 3 # Increase to reset cache
341341
with:
@@ -425,12 +425,12 @@ jobs:
425425
python: ['3.10', '3.11', '3.12', '3.13', '3.14']
426426
steps:
427427
- name: Download conda artifact
428-
uses: actions/download-artifact@v7
428+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
429429
with:
430430
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
431431

432432
- name: Download wheel artifact
433-
uses: actions/download-artifact@v7
433+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
434434
with:
435435
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Wheels Python ${{ matrix.python }}
436436

@@ -469,16 +469,16 @@ jobs:
469469
python: ['3.10', '3.11', '3.12', '3.13', '3.14']
470470
steps:
471471
- name: Download artifact
472-
uses: actions/download-artifact@v7
472+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
473473
with:
474474
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
475475

476476
- name: Download wheel artifact
477-
uses: actions/download-artifact@v7
477+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
478478
with:
479479
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Wheels Python ${{ matrix.python }}
480480

481-
- uses: conda-incubator/setup-miniconda@v3
481+
- uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3.3.0
482482
with:
483483
miniforge-version: latest
484484
channels: conda-forge
@@ -531,11 +531,11 @@ jobs:
531531
conda update -n base --all
532532
conda install conda-index -c conda-forge --override-channels
533533
- name: Checkout dpctl repo
534-
uses: actions/checkout@v6.0.2
534+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
535535
with:
536536
fetch-depth: 0
537537
- name: Download artifact
538-
uses: actions/download-artifact@v7
538+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
539539
with:
540540
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
541541
- name: Add conda to system path
@@ -559,7 +559,7 @@ jobs:
559559
run: |
560560
echo "pkgs_dirs: [~/.conda/pkgs]" >> ~/.condarc
561561
- name: Cache conda packages
562-
uses: actions/cache@v5
562+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
563563
env:
564564
CACHE_NUMBER: 3 # Increase to reset cache
565565
with:
@@ -686,12 +686,12 @@ jobs:
686686
run: |
687687
echo ${{ env.CHANNELS }}
688688
- name: Checkout dpctl repo
689-
uses: actions/checkout@v6.0.2
689+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
690690
with:
691691
fetch-depth: 0
692692
- name: Cache array API tests
693693
id: cache-array-api-tests
694-
uses: actions/cache@v5
694+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
695695
env:
696696
ARRAY_CACHE: 3
697697
with:
@@ -710,7 +710,7 @@ jobs:
710710
git clone --recurse-submodules https://github.com/data-apis/array-api-tests array-api-tests
711711
cd array-api-tests
712712
- name: Download artifact
713-
uses: actions/download-artifact@v7
713+
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
714714
with:
715715
name: ${{ env.PACKAGE_NAME }} ${{ runner.os }} Python ${{ matrix.python }}
716716
- name: Add conda to system path
@@ -739,7 +739,7 @@ jobs:
739739
run: |
740740
echo "pkgs_dirs: [~/.conda/pkgs]" >> ~/.condarc
741741
- name: Cache conda packages
742-
uses: actions/cache@v5
742+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
743743
env:
744744
CACHE_NUMBER: 3 # Increase to reset cache
745745
with:
@@ -806,7 +806,7 @@ jobs:
806806
run: echo "::notice ${{ env.MESSAGE }}"
807807
- name: Post result to PR
808808
if: ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork }}
809-
uses: mshick/add-pr-comment@v2
809+
uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
810810
with:
811811
message: |
812812
${{ env.MESSAGE }}
@@ -822,7 +822,7 @@ jobs:
822822
run:
823823
shell: bash -el {0}
824824
steps:
825-
- uses: conda-incubator/setup-miniconda@v3
825+
- uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3.3.0
826826
with:
827827
run-post: false
828828
channel-priority: "disabled"
@@ -834,7 +834,7 @@ jobs:
834834
run: conda install anaconda-client -c conda-forge --override-channels
835835

836836
- name: Checkout repo
837-
uses: actions/checkout@v6.0.2
837+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
838838
with:
839839
repository: IntelPython/devops-tools
840840
fetch-depth: 0

‎.github/workflows/generate-coverage.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
steps:
2222
- name: Cancel Previous Runs
23-
uses: styfle/cancel-workflow-action@0.13.0
23+
uses: styfle/cancel-workflow-action@3155a141048f8f89c06b4cdae32e7853e97536bc # 0.13.0
2424
with:
2525
access_token: ${{ github.token }}
2626

@@ -49,14 +49,14 @@ jobs:
4949
sudo apt-get install ninja-build
5050
5151
- name: Setup Python
52-
uses: actions/setup-python@v6.2.0
52+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
5353
with:
5454
python-version: '3.12'
5555
architecture: x64
5656

5757
- name: Cache Gtest
5858
id: cache-gtest
59-
uses: actions/cache@v5
59+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
6060
with:
6161
path: |
6262
/home/runner/work/googletest-1.15.2/install
@@ -80,7 +80,7 @@ jobs:
8080
make && make install
8181
8282
- name: Checkout repo
83-
uses: actions/checkout@v6.0.2
83+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
8484
with:
8585
fetch-depth: 0
8686

‎.github/workflows/generate-docs.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
pull-requests: write
1919
steps:
2020
- name: Cancel Previous Runs
21-
uses: styfle/cancel-workflow-action@0.13.0
21+
uses: styfle/cancel-workflow-action@3155a141048f8f89c06b4cdae32e7853e97536bc # 0.13.0
2222
with:
2323
access_token: ${{ github.token }}
2424
- name: Add Intel repository
@@ -50,7 +50,7 @@ jobs:
5050
sudo apt-get install ninja-build
5151
- name: Setup Python
5252
if: ${{ !github.event.pull_request || github.event.action != 'closed' }}
53-
uses: actions/setup-python@v6.2.0
53+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
5454
with:
5555
python-version: '3.10'
5656
architecture: x64
@@ -63,7 +63,7 @@ jobs:
6363
sphinxcontrib-jsmath sphinx-copybutton sphinxcontrib-spelling \
6464
versioneer[toml]==0.29
6565
- name: Checkout repo
66-
uses: actions/checkout@v6.0.2
66+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6767
with:
6868
fetch-depth: 0
6969
persist-credentials: false
@@ -101,7 +101,7 @@ jobs:
101101
git push tokened_docs gh-pages
102102
- name: Save built docs as an artifact
103103
if: ${{ github.event.pull_request && github.event.pull_request.head.repo.fork && github.event.action != 'closed'}}
104-
uses: actions/upload-artifact@v6.0.0
104+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
105105
with:
106106
name: ${{ env.PACKAGE_NAME }} rendered documentation
107107
path: ~/docs
@@ -146,7 +146,7 @@ jobs:
146146
if: ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork && github.event.action != 'closed' }}
147147
env:
148148
PR_NUM: ${{ github.event.number }}
149-
uses: mshick/add-pr-comment@v2
149+
uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
150150
with:
151151
message: |
152152
View rendered docs @ https://intelpython.github.io/dpctl/pulls/${{ env.PR_NUM }}/index.html
@@ -155,7 +155,7 @@ jobs:
155155
if: ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork && github.event.action == 'closed' }}
156156
env:
157157
PR_NUM: ${{ github.event.number }}
158-
uses: mshick/add-pr-comment@v2
158+
uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
159159
with:
160160
message: |
161161
Deleted rendered PR docs from intelpython.github.com/dpctl, latest should be updated shortly. :crossed_fingers:

‎.github/workflows/openssf-scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434

3535
steps:
3636
- name: "Checkout code"
37-
uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v5.0.0
37+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3838
with:
3939
persist-credentials: false
4040

@@ -61,7 +61,7 @@ jobs:
6161
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6262
# format to the repository Actions tab.
6363
- name: "Upload artifact"
64-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4.4.0
64+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
6565
with:
6666
name: SARIF file
6767
path: results.sarif

‎.github/workflows/os-llvm-sycl-build.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Cancel Previous Runs
25-
uses: styfle/cancel-workflow-action@0.13.0
25+
uses: styfle/cancel-workflow-action@3155a141048f8f89c06b4cdae32e7853e97536bc # 0.13.0
2626
with:
2727
access_token: ${{ github.token }}
2828

@@ -33,7 +33,7 @@ jobs:
3333
3434
- name: Cache sycl bundle
3535
id: cache-sycl-bundle
36-
uses: actions/cache@v5
36+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
3737
with:
3838
path: |
3939
/home/runner/work/sycl_bundle
@@ -99,7 +99,7 @@ jobs:
9999
fi
100100
101101
- name: Setup Python
102-
uses: actions/setup-python@v6.2.0
102+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
103103
with:
104104
python-version: '3.12'
105105
architecture: x64
@@ -110,7 +110,7 @@ jobs:
110110
pip install numpy cython setuptools"<80" pytest scikit-build cmake ninja versioneer[toml]==0.29
111111
112112
- name: Checkout repo
113-
uses: actions/checkout@v6.0.2
113+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
114114
with:
115115
fetch-depth: 0
116116

0 commit comments

Comments
 (0)