Skip to content

Commit 9714cdb

Browse files
committed
ci: use full commit SHAs for GitHub Actions
Replace version tags with full commit SHAs to comply with repository security policy requiring explicit action versions: - actions/checkout@v4.3.0 → 08eba0b27e820071cde6df949e0beb9ba4906955 - actions/setup-node@v4.4.0 → 49933ea5288caeca8642d1e84afbd3f7d6820020 - actions/cache@v4.3.0 → 0057852bfaa89a56745cba8c7296529d2fc39830 - pnpm/action-setup@v4.2.0 → 41ff72655975bd51cab0327fa583b6e92b6d3061 All SHAs verified and include version comments for reference.
1 parent 727df1a commit 9714cdb

1 file changed

Lines changed: 15 additions & 15 deletions

File tree

.github/workflows/ci.yml

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -25,15 +25,15 @@ jobs:
2525
timeout-minutes: 10
2626
steps:
2727
- name: Checkout code
28-
uses: actions/checkout@v4
28+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
2929

3030
- name: Setup pnpm
31-
uses: pnpm/action-setup@v4
31+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
3232
with:
3333
version: 10
3434

3535
- name: Setup Node.js
36-
uses: actions/setup-node@v4
36+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
3737
with:
3838
node-version: 22
3939
cache: 'pnpm'
@@ -51,15 +51,15 @@ jobs:
5151
timeout-minutes: 10
5252
steps:
5353
- name: Checkout code
54-
uses: actions/checkout@v4
54+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5555

5656
- name: Setup pnpm
57-
uses: pnpm/action-setup@v4
57+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
5858
with:
5959
version: 10
6060

6161
- name: Setup Node.js
62-
uses: actions/setup-node@v4
62+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
6363
with:
6464
node-version: 22
6565
cache: 'pnpm'
@@ -71,7 +71,7 @@ jobs:
7171
run: pnpm run build
7272

7373
- name: Cache build artifacts
74-
uses: actions/cache/save@v4
74+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7575
with:
7676
path: |
7777
dist
@@ -91,21 +91,21 @@ jobs:
9191
os: [ubuntu-latest, windows-latest]
9292
steps:
9393
- name: Checkout code
94-
uses: actions/checkout@v4
94+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
9595

9696
- name: Setup pnpm
97-
uses: pnpm/action-setup@v4
97+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
9898
with:
9999
version: 10
100100

101101
- name: Setup Node.js
102-
uses: actions/setup-node@v4
102+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
103103
with:
104104
node-version: ${{ matrix.node }}
105105
cache: 'pnpm'
106106

107107
- name: Restore build artifacts
108-
uses: actions/cache/restore@v4
108+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
109109
with:
110110
path: |
111111
dist
@@ -128,21 +128,21 @@ jobs:
128128
timeout-minutes: 10
129129
steps:
130130
- name: Checkout code
131-
uses: actions/checkout@v4
131+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
132132

133133
- name: Setup pnpm
134-
uses: pnpm/action-setup@v4
134+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
135135
with:
136136
version: 10
137137

138138
- name: Setup Node.js
139-
uses: actions/setup-node@v4
139+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
140140
with:
141141
node-version: 22
142142
cache: 'pnpm'
143143

144144
- name: Restore build artifacts
145-
uses: actions/cache/restore@v4
145+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
146146
with:
147147
path: |
148148
dist

0 commit comments

Comments
 (0)