Skip to content

Commit b470ffa

Browse files
V3RONV3RON
committed
chore: pin GitHub Action SHAs
1 parent 30a8f50 commit b470ffa

5 files changed

Lines changed: 51 additions & 51 deletions

File tree

‎.github/workflows/e2e-tests.yml‎

Lines changed: 36 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -33,26 +33,26 @@ jobs:
3333
DEBUG: 'Metro:*'
3434
steps:
3535
- name: Checkout code
36-
uses: actions/checkout@v4
36+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3737
with:
3838
ref: ${{ github.event.pull_request.head.sha || github.ref }}
3939
fetch-depth: 0
4040

4141
- name: Reclaim disk space
42-
uses: AdityaGarg8/remove-unwanted-software@v5
42+
uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793 # v5
4343
with:
4444
remove-dotnet: true
4545
remove-haskell: true
4646
remove-codeql: true
4747
remove-docker-images: true
4848

4949
- name: Install pnpm
50-
uses: pnpm/action-setup@v2
50+
uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1
5151
with:
5252
version: latest
5353

5454
- name: Setup Node.js
55-
uses: actions/setup-node@v4
55+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
5656
with:
5757
node-version: '24.10.0'
5858
cache: 'pnpm'
@@ -66,14 +66,14 @@ jobs:
6666
pnpm nx run-many -t build --projects="packages/*"
6767
6868
- name: Set up JDK 17
69-
uses: actions/setup-java@v3
69+
uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3.14.1
7070
with:
7171
java-version: '17'
7272
distribution: 'temurin'
7373

7474
- name: Restore APK from cache
7575
id: cache-apk-restore
76-
uses: actions/cache/restore@v4
76+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7777
with:
7878
path: apps/playground/android/app/build/outputs/apk/debug/app-debug.apk
7979
key: apk-playground
@@ -86,7 +86,7 @@ jobs:
8686
8787
- name: Save APK to cache
8888
if: steps.cache-apk-restore.outputs.cache-hit != 'true' && success()
89-
uses: actions/cache/save@v4
89+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
9090
with:
9191
path: apps/playground/android/app/build/outputs/apk/debug/app-debug.apk
9292
key: apk-playground
@@ -106,7 +106,7 @@ jobs:
106106
107107
- name: Upload Harness logs
108108
if: always()
109-
uses: actions/upload-artifact@v4
109+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
110110
with:
111111
name: harness-logs-e2e-android
112112
path: apps/playground/.harness/logs
@@ -122,24 +122,24 @@ jobs:
122122
DEBUG: 'Metro:*'
123123
steps:
124124
- name: Checkout code
125-
uses: actions/checkout@v4
125+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
126126
with:
127127
ref: ${{ github.event.pull_request.head.sha || github.ref }}
128128
fetch-depth: 0
129129

130130
- name: Install pnpm
131-
uses: pnpm/action-setup@v2
131+
uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1
132132
with:
133133
version: latest
134134

135135
- name: Setup Node.js
136-
uses: actions/setup-node@v4
136+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
137137
with:
138138
node-version: '24.10.0'
139139
cache: 'pnpm'
140140

141141
- name: Setup Xcode 26
142-
uses: maxim-lobanov/setup-xcode@v1
142+
uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
143143
with:
144144
xcode-version: '26.0'
145145

@@ -156,14 +156,14 @@ jobs:
156156
157157
- name: Restore app from cache
158158
id: cache-app-restore
159-
uses: actions/cache/restore@v4
159+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
160160
with:
161161
path: ./apps/playground/ios/build/Build/Products/Debug-iphonesimulator/HarnessPlayground.app
162162
key: ios-app-playground
163163

164164
- name: CocoaPods cache
165165
if: steps.cache-app-restore.outputs.cache-hit != 'true'
166-
uses: actions/cache@v4
166+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
167167
with:
168168
path: |
169169
./apps/playground/ios/Pods
@@ -187,7 +187,7 @@ jobs:
187187
188188
- name: Save app to cache
189189
if: steps.cache-app-restore.outputs.cache-hit != 'true' && success()
190-
uses: actions/cache/save@v4
190+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
191191
with:
192192
path: ./apps/playground/ios/build/Build/Products/Debug-iphonesimulator/HarnessPlayground.app
193193
key: ios-app-playground
@@ -207,7 +207,7 @@ jobs:
207207
208208
- name: Upload Harness logs
209209
if: always()
210-
uses: actions/upload-artifact@v4
210+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
211211
with:
212212
name: harness-logs-e2e-ios
213213
path: apps/playground/.harness/logs
@@ -223,18 +223,18 @@ jobs:
223223
DEBUG: 'Metro:*'
224224
steps:
225225
- name: Checkout code
226-
uses: actions/checkout@v4
226+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
227227
with:
228228
ref: ${{ github.event.pull_request.head.sha || github.ref }}
229229
fetch-depth: 0
230230

231231
- name: Install pnpm
232-
uses: pnpm/action-setup@v2
232+
uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1
233233
with:
234234
version: latest
235235

236236
- name: Setup Node.js
237-
uses: actions/setup-node@v4
237+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
238238
with:
239239
node-version: '24.10.0'
240240
cache: 'pnpm'
@@ -261,7 +261,7 @@ jobs:
261261
262262
- name: Upload Harness logs
263263
if: always()
264-
uses: actions/upload-artifact@v4
264+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
265265
with:
266266
name: harness-logs-e2e-web
267267
path: apps/playground/.harness/logs
@@ -278,26 +278,26 @@ jobs:
278278

279279
steps:
280280
- name: Checkout code
281-
uses: actions/checkout@v4
281+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
282282
with:
283283
ref: ${{ github.ref }}
284284
fetch-depth: 0
285285

286286
- name: Reclaim disk space
287-
uses: AdityaGarg8/remove-unwanted-software@v5
287+
uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793 # v5
288288
with:
289289
remove-dotnet: true
290290
remove-haskell: true
291291
remove-codeql: true
292292
remove-docker-images: true
293293

294294
- name: Install pnpm
295-
uses: pnpm/action-setup@v2
295+
uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1
296296
with:
297297
version: latest
298298

299299
- name: Setup Node.js
300-
uses: actions/setup-node@v4
300+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
301301
with:
302302
node-version: '24.10.0'
303303
cache: 'pnpm'
@@ -311,14 +311,14 @@ jobs:
311311
pnpm nx run-many -t build --projects="packages/*"
312312
313313
- name: Set up JDK 17
314-
uses: actions/setup-java@v3
314+
uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3.14.1
315315
with:
316316
java-version: '17'
317317
distribution: 'temurin'
318318

319319
- name: Restore APK from cache
320320
id: cache-apk-restore
321-
uses: actions/cache/restore@v4
321+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
322322
with:
323323
path: apps/playground/android/app/build/outputs/apk/debug/app-debug.apk
324324
key: apk-playground
@@ -331,7 +331,7 @@ jobs:
331331
332332
- name: Save APK to cache
333333
if: steps.cache-apk-restore.outputs.cache-hit != 'true' && success()
334-
uses: actions/cache/save@v4
334+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
335335
with:
336336
path: apps/playground/android/app/build/outputs/apk/debug/app-debug.apk
337337
key: apk-playground
@@ -375,7 +375,7 @@ jobs:
375375
376376
- name: Upload Harness logs
377377
if: always()
378-
uses: actions/upload-artifact@v4
378+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
379379
with:
380380
name: harness-logs-crash-validate-android
381381
path: apps/playground/.harness/logs
@@ -391,24 +391,24 @@ jobs:
391391
DEBUG: 'Metro:*'
392392
steps:
393393
- name: Checkout code
394-
uses: actions/checkout@v4
394+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
395395
with:
396396
ref: ${{ github.ref }}
397397
fetch-depth: 0
398398

399399
- name: Install pnpm
400-
uses: pnpm/action-setup@v2
400+
uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1
401401
with:
402402
version: latest
403403

404404
- name: Setup Node.js
405-
uses: actions/setup-node@v4
405+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
406406
with:
407407
node-version: '24.10.0'
408408
cache: 'pnpm'
409409

410410
- name: Setup Xcode 26
411-
uses: maxim-lobanov/setup-xcode@v1
411+
uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0
412412
with:
413413
xcode-version: '26.0'
414414

@@ -425,14 +425,14 @@ jobs:
425425
426426
- name: Restore app from cache
427427
id: cache-app-restore
428-
uses: actions/cache/restore@v4
428+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
429429
with:
430430
path: ./apps/playground/ios/build/Build/Products/Debug-iphonesimulator/HarnessPlayground.app
431431
key: ios-app-playground
432432

433433
- name: CocoaPods cache
434434
if: steps.cache-app-restore.outputs.cache-hit != 'true'
435-
uses: actions/cache@v4
435+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
436436
with:
437437
path: |
438438
./apps/playground/ios/Pods
@@ -456,7 +456,7 @@ jobs:
456456
457457
- name: Save app to cache
458458
if: steps.cache-app-restore.outputs.cache-hit != 'true' && success()
459-
uses: actions/cache/save@v4
459+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
460460
with:
461461
path: ./apps/playground/ios/build/Build/Products/Debug-iphonesimulator/HarnessPlayground.app
462462
key: ios-app-playground
@@ -500,7 +500,7 @@ jobs:
500500
501501
- name: Upload Harness logs
502502
if: always()
503-
uses: actions/upload-artifact@v4
503+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
504504
with:
505505
name: harness-logs-crash-validate-ios
506506
path: apps/playground/.harness/logs

‎packages/github-action/src/action.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ runs:
6565
exit 1
6666
fi
6767
- name: Metro bundler cache (.harness/metro-cache)
68-
uses: actions/cache@v4
68+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
6969
with:
7070
path: ${{ steps.load-config.outputs.projectRoot }}/.harness/metro-cache
7171
key: ${{ runner.os }}-metro-cache-${{ hashFiles('**/bun.lock', '**/bun.lockb', '**/package-lock.json', '**/npm-shrinkwrap.json', '**/pnpm-lock.yaml', '**/yarn.lock', '**/metro.config.js', '**/metro.config.cjs', '**/metro.config.mjs', '**/metro.config.ts', '**/babel.config.js', '**/babel.config.cjs', '**/babel.config.mjs', '**/babel.config.ts', '**/babel.config.json') }}
@@ -74,7 +74,7 @@ runs:
7474
- name: Restore Harness cache
7575
id: cache-harness-restore
7676
if: fromJson(steps.load-config.outputs.config).platformId == 'ios'
77-
uses: actions/cache/restore@v4
77+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7878
with:
7979
path: ${{ steps.load-config.outputs.projectRoot }}/.harness/cache
8080
key: harness-ios-${{ runner.os }}-${{ hashFiles(format('{0}/.harness/cache/**/cache.json', steps.load-config.outputs.projectRoot)) }}
@@ -132,7 +132,7 @@ runs:
132132
CACHE_KEY="avd-$AVD_NAME-$ARCH-$AVD_CONFIG_HASH"
133133
echo "key=$CACHE_KEY" >> $GITHUB_OUTPUT
134134
- name: Restore AVD cache
135-
uses: actions/cache/restore@v4
135+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
136136
id: avd-cache
137137
if: ${{ fromJson(steps.load-config.outputs.config).platformId == 'android' && fromJson(steps.load-config.outputs.config).config.device.type == 'emulator' && fromJson(steps.load-config.outputs.config).action.avdCachingEnabled }}
138138
with:
@@ -221,7 +221,7 @@ runs:
221221
fi
222222
- name: Upload visual test artifacts
223223
if: always() && inputs.uploadVisualTestArtifacts == 'true'
224-
uses: actions/upload-artifact@v4
224+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
225225
with:
226226
name: visual-test-diffs-${{ fromJson(steps.load-config.outputs.config).platformId }}
227227
path: |
@@ -230,21 +230,21 @@ runs:
230230
if-no-files-found: ignore
231231
- name: Save AVD cache
232232
if: ${{ always() && fromJson(steps.load-config.outputs.config).platformId == 'android' && fromJson(steps.load-config.outputs.config).config.device.type == 'emulator' && fromJson(steps.load-config.outputs.config).action.avdCachingEnabled && steps.avd-cache.outputs.cache-hit != 'true' }}
233-
uses: actions/cache/save@v4
233+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
234234
with:
235235
path: |
236236
~/.android/avd
237237
~/.android/adb*
238238
key: ${{ steps.avd-key.outputs.key }}
239239
- name: Save Harness cache
240240
if: ${{ always() && fromJson(steps.load-config.outputs.config).platformId == 'ios' && steps.cache-harness-restore.outputs.cache-hit != 'true' }}
241-
uses: actions/cache/save@v4
241+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
242242
with:
243243
path: ${{ steps.load-config.outputs.projectRoot }}/.harness/cache
244244
key: ${{ steps.cache-harness-restore.outputs.cache-primary-key }}
245245
- name: Upload crash report artifacts
246246
if: always()
247-
uses: actions/upload-artifact@v4
247+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
248248
with:
249249
name: harness-crash-reports-${{ fromJson(steps.load-config.outputs.config).platformId }}
250250
path: ${{ steps.load-config.outputs.projectRoot }}/.harness/crash-reports/**/*

‎packages/github-action/src/android/action.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -98,7 +98,7 @@ runs:
9898
echo "key=$CACHE_KEY" >> $GITHUB_OUTPUT
9999
- name: Restore AVD cache
100100
if: ${{ fromJson(steps.load-config.outputs.config).config.device.type == 'emulator' && fromJson(steps.load-config.outputs.config).action.avdCachingEnabled }}
101-
uses: actions/cache/restore@v4
101+
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
102102
id: avd-cache
103103
with:
104104
path: |
@@ -150,7 +150,7 @@ runs:
150150
fi
151151
- name: Upload visual test artifacts
152152
if: always() && inputs.uploadVisualTestArtifacts == 'true'
153-
uses: actions/upload-artifact@v4
153+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
154154
with:
155155
name: visual-test-diffs-android
156156
path: |
@@ -159,15 +159,15 @@ runs:
159159
if-no-files-found: ignore
160160
- name: Save AVD cache
161161
if: ${{ always() && fromJson(steps.load-config.outputs.config).config.device.type == 'emulator' && fromJson(steps.load-config.outputs.config).action.avdCachingEnabled && steps.avd-cache.outputs.cache-hit != 'true' }}
162-
uses: actions/cache/save@v4
162+
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
163163
with:
164164
path: |
165165
~/.android/avd
166166
~/.android/adb*
167167
key: ${{ steps.avd-key.outputs.key }}
168168
- name: Upload crash report artifacts
169169
if: always()
170-
uses: actions/upload-artifact@v4
170+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
171171
with:
172172
name: harness-crash-reports-android
173173
path: ${{ inputs.projectRoot }}/.harness/crash-reports/**/*

0 commit comments

Comments
 (0)