Skip to content

Commit b1a4925

Browse files
LizardByte-botLizardByte-bot
committed
chore: update GitHub Actions to use commit hashes
1 parent 20afc26 commit b1a4925

20 files changed

Lines changed: 62 additions & 62 deletions

‎.github/workflows/__audit-repos.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: Audit
18-
uses: LizardByte/actions/actions/audit_repos@v2026.129.194351
18+
uses: LizardByte/actions/actions/audit_repos@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
1919
with:
2020
allowEmptyDescription: true
2121
checkDiscussions: org

‎.github/workflows/__call-ci-node.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,11 @@ jobs:
3131
runs-on: ubuntu-latest
3232
steps:
3333
- name: Checkout
34-
uses: actions/checkout@v6
34+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3535

3636
- name: Setup Release
3737
id: setup_release
38-
uses: LizardByte/actions/actions/release_setup@v2026.129.194351
38+
uses: LizardByte/actions/actions/release_setup@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
3939
with:
4040
github_token: ${{ secrets.GITHUB_TOKEN }}
4141

@@ -45,10 +45,10 @@ jobs:
4545
- setup_release
4646
steps:
4747
- name: Checkout
48-
uses: actions/checkout@v6
48+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
4949

5050
- name: Setup node
51-
uses: actions/setup-node@v6
51+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
5252
with:
5353
node-version: latest
5454

@@ -124,7 +124,7 @@ jobs:
124124
steps:
125125
- name: Create Release
126126
id: action
127-
uses: LizardByte/actions/actions/release_create@v2026.129.194351
127+
uses: LizardByte/actions/actions/release_create@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
128128
with:
129129
allowUpdates: false
130130
artifacts: ''

‎.github/workflows/__call-codeql.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout repository
21-
uses: actions/checkout@v6
21+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2222

2323
- name: Get repo languages
2424
id: lang
25-
uses: actions/github-script@v8
25+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2626
with:
2727
script: |
2828
// CodeQL supports the following:
@@ -146,7 +146,7 @@ jobs:
146146
147147
- name: Continue
148148
id: continue
149-
uses: actions/github-script@v8
149+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
150150
with:
151151
script: |
152152
// if matrix['include'] is an empty list return false, otherwise true
@@ -175,13 +175,13 @@ jobs:
175175
timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 60 }}
176176
steps:
177177
- name: Checkout repository
178-
uses: actions/checkout@v6
178+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
179179
with:
180180
submodules: recursive
181181

182182
# Initializes the CodeQL tools for scanning.
183183
- name: Initialize CodeQL
184-
uses: github/codeql-action/init@v4
184+
uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
185185
with:
186186
languages: ${{ matrix.language }}
187187
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -201,10 +201,10 @@ jobs:
201201
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
202202
- name: Autobuild
203203
if: matrix.build-mode == 'autobuild'
204-
uses: github/codeql-action/autobuild@v4
204+
uses: github/codeql-action/autobuild@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
205205

206206
- name: Perform CodeQL Analysis
207-
uses: github/codeql-action/analyze@v4
207+
uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
208208
with:
209209
category: "${{ matrix.category }}"
210210
output: sarif-results
@@ -221,13 +221,13 @@ jobs:
221221
-third\-party/**
222222
223223
- name: Upload SARIF
224-
uses: github/codeql-action/upload-sarif@v4
224+
uses: github/codeql-action/upload-sarif@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
225225
with:
226226
category: "${{ matrix.category }}"
227227
sarif_file: sarif-results/${{ matrix.language }}.sarif
228228

229229
- name: Upload loc as a Build Artifact
230-
uses: actions/upload-artifact@v6
230+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
231231
with:
232232
name: sarif-results-${{ matrix.language }}-${{ runner.os }}
233233
path: sarif-results

‎.github/workflows/__call-common-lint.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ jobs:
1818
CLANG_FORMAT_VERSION: 20
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@v6
21+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2222

2323
- name: Get changed files
2424
id: changed_files
25-
uses: actions/github-script@v8
25+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2626
with:
2727
script: |
2828
const opts = github.rest.pulls.listFiles.endpoint.merge({
@@ -77,7 +77,7 @@ jobs:
7777
done
7878
7979
- name: Set up Python
80-
uses: actions/setup-python@v6
80+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
8181
with:
8282
python-version: '3.12'
8383

‎.github/workflows/__call-docker.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
runs-on: ubuntu-latest
6565
steps:
6666
- name: Checkout
67-
uses: actions/checkout@v6
67+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6868

6969
- name: Find dockerfiles
7070
id: find
@@ -128,13 +128,13 @@ jobs:
128128
steps:
129129
- name: More space
130130
if: inputs.maximize_build_space
131-
uses: LizardByte/actions/actions/more_space@v2026.129.194351
131+
uses: LizardByte/actions/actions/more_space@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
132132
with:
133133
analyze-space-savings: true
134134
clean-all: true
135135

136136
- name: Checkout
137-
uses: actions/checkout@v6
137+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
138138
with:
139139
submodules: recursive
140140

@@ -230,7 +230,7 @@ jobs:
230230
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
231231

232232
- name: Cache Docker Layers
233-
uses: actions/cache@v5
233+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
234234
with:
235235
path: /tmp/.buildx-cache
236236
key: Docker-buildx${{ matrix.tag }}-${{ github.sha }}
@@ -306,7 +306,7 @@ jobs:
306306
307307
- name: Upload Artifacts
308308
if: steps.prepare.outputs.artifacts == 'true'
309-
uses: actions/upload-artifact@v6
309+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
310310
with:
311311
name: build-Docker${{ matrix.tag }}
312312
path: artifacts/
@@ -323,7 +323,7 @@ jobs:
323323
- docker
324324
steps:
325325
- name: Checkout
326-
uses: actions/checkout@v6
326+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
327327
with:
328328
sparse-checkout: |
329329
DOCKER_README.md

‎.github/workflows/__call-release-notifier.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
env:
2727
TOPIC: replicator-release-notifications
2828
id: check-label
29-
uses: actions/github-script@v8
29+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
3030
with:
3131
script: |
3232
const topic = process.env.TOPIC;
@@ -46,7 +46,7 @@ jobs:
4646
- name: Check if latest GitHub release
4747
id: check-release
4848
if: steps.check-label.outputs.hasTopic == 'true'
49-
uses: actions/github-script@v8
49+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
5050
with:
5151
script: |
5252
const latestRelease = await github.rest.repos.getLatestRelease({
@@ -60,7 +60,7 @@ jobs:
6060
if: >-
6161
steps.check-label.outputs.hasTopic == 'true' &&
6262
steps.check-release.outputs.isLatestRelease == 'true'
63-
uses: actions/checkout@v6
63+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6464
with:
6565
repository: "LizardByte/LizardByte.github.io"
6666

‎.github/workflows/__call-update-changelog.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Update Changelog
21-
uses: LizardByte/actions/actions/release_changelog@v2026.129.194351
21+
uses: LizardByte/actions/actions/release_changelog@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
2222
with:
2323
changelogBranch: changelog
2424
changelogFile: CHANGELOG.md

‎.github/workflows/__call-update-docs.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
if: >-
5757
github.event_name == 'release' &&
5858
github.event.action == 'edited'
59-
uses: actions/github-script@v8
59+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
6060
with:
6161
script: |
6262
const latestRelease = await github.rest.repos.getLatestRelease({

‎.github/workflows/__call-update-flathub-repo.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
id: check-label
2727
env:
2828
TOPIC: flathub-pkg
29-
uses: actions/github-script@v8
29+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
3030
with:
3131
script: |
3232
const topic = process.env.TOPIC;
@@ -46,7 +46,7 @@ jobs:
4646
- name: Check if latest GitHub release
4747
id: check-release
4848
if: steps.check-label.outputs.hasTopic == 'true'
49-
uses: actions/github-script@v8
49+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
5050
with:
5151
script: |
5252
const latestRelease = await github.rest.repos.getLatestRelease({
@@ -60,13 +60,13 @@ jobs:
6060
if: >-
6161
steps.check-label.outputs.hasTopic == 'true' &&
6262
steps.check-release.outputs.isLatestRelease == 'true'
63-
uses: actions/checkout@v6
63+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6464

6565
- name: Checkout flathub-repo
6666
if: >-
6767
steps.check-label.outputs.hasTopic == 'true' &&
6868
steps.check-release.outputs.isLatestRelease == 'true'
69-
uses: actions/checkout@v6
69+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
7070
with:
7171
repository: "flathub/${{ env.FLATHUB_PKG }}"
7272
path: "flathub/${{ env.FLATHUB_PKG }}"

‎.github/workflows/__call-update-homebrew-repo.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
id: check-label
2525
env:
2626
TOPIC: homebrew-pkg
27-
uses: actions/github-script@v8
27+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2828
with:
2929
script: |
3030
const topic = process.env.TOPIC;
@@ -58,7 +58,7 @@ jobs:
5858
if: >-
5959
steps.check-label.outputs.hasTopic == 'true' &&
6060
fromJson(steps.download.outputs.downloaded_files)[0]
61-
uses: LizardByte/actions/actions/release_homebrew@v2026.129.194351
61+
uses: LizardByte/actions/actions/release_homebrew@09a6e10dc8175f2933c20bdf35fde0a193a9c00e # v2026.129.194351
6262
with:
6363
formula_file: ${{ fromJson(steps.download.outputs.downloaded_files)[0] }}
6464
git_email: ${{ secrets.GH_EMAIL }}

0 commit comments

Comments
 (0)