Skip to content

Commit 7d7c3f2

Browse files
yasnagatyasnagat
authored
chore: pin GitHub Actions to SHA hashes (#1944)
1 parent b12a0a2 commit 7d7c3f2

6 files changed

Lines changed: 33 additions & 33 deletions

File tree

‎.github/workflows/cd.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,12 @@ jobs:
1717
outputs:
1818
branch-name: ${{ steps.set-branch-name.outputs.branch-name }}
1919
steps:
20-
- uses: actions/checkout@v6
21-
- uses: actions/setup-node@v6
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
21+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
2222
with:
2323
node-version: '22.20.0'
2424
cache: 'yarn'
25-
- uses: actions/cache@v5
25+
- uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
2626
id: yarn-cache
2727
with:
2828
path: |
@@ -33,15 +33,15 @@ jobs:
3333
if: steps.yarn-cache.outputs.cache-hit != 'true'
3434
- run: yarn run ci
3535
- run: yarn run docs
36-
- uses: actions/upload-artifact@v7
36+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
3737
with:
3838
name: storybooks
3939
path: |
4040
packages/fuselage/storybook-static
4141
packages/onboarding-ui/storybook-static
4242
packages/layout/storybook-static
4343
44-
- uses: actions/upload-artifact@v7
44+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4545
with:
4646
name: docs
4747
path: |
@@ -50,7 +50,7 @@ jobs:
5050
ref='${{ github.ref }}'
5151
echo "::set-output name=branch-name::$(echo "${ref:11}")"
5252
id: set-branch-name
53-
- uses: actions/upload-artifact@v7
53+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5454
with:
5555
name: build
5656
path: packages/**/dist/*
@@ -61,23 +61,23 @@ jobs:
6161
needs:
6262
- build-and-test
6363
steps:
64-
- uses: actions/checkout@v6
64+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6565
with:
6666
fetch-depth: 0
67-
- uses: actions/setup-node@v6
67+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
6868
with:
6969
node-version: '22.20.0'
7070
registry-url: 'https://registry.npmjs.org'
7171
scope: '@rocket.chat'
7272
cache: 'yarn'
73-
- uses: actions/cache@v5
73+
- uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
7474
id: yarn-cache
7575
with:
7676
path: |
7777
**/node_modules
7878
.yarn/cache
7979
key: ${{ runner.os }}-modules-${{ hashFiles('yarn.lock') }}
80-
- uses: actions/download-artifact@v8
80+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
8181
with:
8282
name: build
8383
path: packages
@@ -86,7 +86,7 @@ jobs:
8686

8787
- name: Create Release Pull Request
8888
id: changesets
89-
uses: changesets/action@v1
89+
uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
9090
env:
9191
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
9292

@@ -96,7 +96,7 @@ jobs:
9696

9797
- name: Publish to npm
9898
if: steps.changesets.outputs.hasChangesets == 'false'
99-
uses: changesets/action@v1
99+
uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
100100
with:
101101
publish: yarn release
102102
env:
@@ -113,15 +113,15 @@ jobs:
113113
name: github-pages
114114
url: 'https://rocketchat.github.io/fuselage/fuselage/${{ needs.build-and-test.outputs.branch-name }}'
115115
steps:
116-
- uses: actions/checkout@v6
116+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
117117
with:
118118
ref: gh-pages
119-
- uses: actions/download-artifact@v8
119+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
120120
with:
121121
name: storybooks
122122
path: packages
123123

124-
- uses: actions/download-artifact@v8
124+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
125125
with:
126126
name: docs
127127
path: .
@@ -131,7 +131,7 @@ jobs:
131131
mv -v "packages/onboarding-ui/storybook-static" "onboarding-ui/${{ needs.build-and-test.outputs.branch-name }}"
132132
mv -v "packages/layout/storybook-static" "layout/${{ needs.build-and-test.outputs.branch-name }}"
133133
rm -rf packages
134-
- uses: crazy-max/ghaction-github-pages@v5
134+
- uses: crazy-max/ghaction-github-pages@1d6ee9b181a81033a16bd707a1401afa978daab4 # v5.0.0
135135
with:
136136
target_branch: gh-pages
137137
build_dir: .

‎.github/workflows/ci-pr-closed.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ jobs:
1010
name: 'Delete Storybook for PR #${{ github.event.number }}'
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
with:
1515
ref: gh-pages
1616
- run: rm -rf "fuselage/${{ github.event.number }}" "layout/${{ github.event.number }}" "onboarding-ui/${{ github.event.number }}"
17-
- uses: crazy-max/ghaction-github-pages@v5
17+
- uses: crazy-max/ghaction-github-pages@1d6ee9b181a81033a16bd707a1401afa978daab4 # v5.0.0
1818
with:
1919
target_branch: gh-pages
2020
build_dir: .

‎.github/workflows/ci-pr-opened.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
pr-number: ${{ steps.set-pr-number.outputs.pr-number }}
1616
steps:
1717
- id: set-pr-number
18-
uses: actions/github-script@v8.0.0
18+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
1919
with:
2020
script: |
2121
var artifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -37,7 +37,7 @@ jobs:
3737
const prNumber = /^storybooks-(\d+)$/.exec(matchArtifact.name)[1];
3838
console.log(`::set-output name=pr-number::${ prNumber }`);
3939
- run: unzip storybooks.zip
40-
- uses: actions/upload-artifact@v7
40+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4141
with:
4242
name: storybooks
4343
path: |
@@ -53,10 +53,10 @@ jobs:
5353
name: github-pages
5454
url: 'https://rocketchat.github.io/fuselage/fuselage/${{ needs.download-artifact.outputs.pr-number }}'
5555
steps:
56-
- uses: actions/checkout@v6
56+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5757
with:
5858
ref: gh-pages
59-
- uses: actions/download-artifact@v8
59+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6060
with:
6161
name: storybooks
6262
path: packages
@@ -66,7 +66,7 @@ jobs:
6666
mv -v packages/onboarding-ui/storybook-static "onboarding-ui/${{ needs.download-artifact.outputs.pr-number }}"
6767
mv -v packages/layout/storybook-static "layout/${{ needs.download-artifact.outputs.pr-number }}"
6868
rm -rf packages
69-
- uses: crazy-max/ghaction-github-pages@v5
69+
- uses: crazy-max/ghaction-github-pages@1d6ee9b181a81033a16bd707a1401afa978daab4 # v5.0.0
7070
with:
7171
target_branch: gh-pages
7272
build_dir: .

‎.github/workflows/ci-pr.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -19,12 +19,12 @@ jobs:
1919
TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
2020
runs-on: ubuntu-latest
2121
steps:
22-
- uses: actions/checkout@v6
23-
- uses: actions/setup-node@v6
22+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
23+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
2424
with:
2525
node-version: '22.20.0'
2626
cache: 'yarn'
27-
- uses: actions/cache@v5
27+
- uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
2828
id: yarn-cache
2929
with:
3030
path: |
@@ -33,7 +33,7 @@ jobs:
3333
key: ${{ runner.os }}-modules-${{ hashFiles('yarn.lock') }}
3434
- name: Turbo Cache
3535
id: turbo-cache
36-
uses: actions/cache@v5
36+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3737
with:
3838
path: .turbo
3939
key: turbo-${{ runner.os }}-${{ github.job }}
@@ -42,7 +42,7 @@ jobs:
4242
- run: yarn
4343
if: steps.yarn-cache.outputs.cache-hit != 'true'
4444
- run: yarn run ci
45-
- uses: actions/upload-artifact@v7
45+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4646
with:
4747
name: 'storybooks-${{ github.event.number }}'
4848
path: |

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,18 +24,18 @@ jobs:
2424

2525
steps:
2626
- name: Checkout
27-
uses: actions/checkout@v6
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2828

2929
- name: Initialize CodeQL
30-
uses: github/codeql-action/init@v4
30+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
3131
with:
3232
languages: ${{ matrix.language }}
3333
queries: +security-and-quality
3434

3535
- name: Autobuild
36-
uses: github/codeql-action/autobuild@v4
36+
uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
3737

3838
- name: Perform CodeQL Analysis
39-
uses: github/codeql-action/analyze@v4
39+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
4040
with:
4141
category: '/language:${{ matrix.language }}'

‎.github/workflows/pr-title.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,6 @@ jobs:
77
check:
88
runs-on: ubuntu-latest
99
steps:
10-
- uses: thehanimo/pr-title-checker@v1.4.3
10+
- uses: thehanimo/pr-title-checker@7fbfe05602bdd86f926d3fb3bccb6f3aed43bc70 # v1.4.3
1111
with:
1212
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)