Merge pull request uxlfoundation#974 from hvdijk/repin-dependencies

Re-pin workflow actions and container dependencies.

Author: hvdijk

.github/actions/do_build_dpcpp/action.yml

@@ -27,7 +27,7 @@ runs:
         target: ${{ inputs.target }}  
 
     - name: Install Ninja
-      uses: llvm/actions/install-ninja@main
+      uses: llvm/actions/install-ninja@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
 
     - name: clone dpc++
       if: contains(inputs.download_dpcpp_artefact, inputs.target) != true

.github/actions/do_build_llvm/action.yml

@@ -31,7 +31,7 @@ runs:
   steps:
       - name: Setup Windows
         if: startsWith(runner.os, 'Windows')
-        uses: llvm/actions/setup-windows@main
+        uses: llvm/actions/setup-windows@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
         with:
           arch: amd64
       - name: Cache llvm

.github/actions/do_build_run_sycl_e2e/action.yml

@@ -23,7 +23,7 @@ runs:
         target: ${{ inputs.target }}
 
     - name: Install Ninja
-      uses: llvm/actions/install-ninja@main
+      uses: llvm/actions/install-ninja@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
 
     - name: download icd artifact
       if: inputs.sycl_device == 'opencl'

.github/actions/do_build_sycl_cts/action.yml

@@ -25,7 +25,7 @@ runs:
 
     - name: Install Ninja
       if: contains(inputs.download_sycl_cts_artefact, inputs.target) != true
-      uses: llvm/actions/install-ninja@main
+      uses: llvm/actions/install-ninja@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
 
     - name: download icd artifact
       if: inputs.sycl_device == 'opencl' && contains(inputs.download_sycl_cts_artefact, inputs.target) != true

.github/actions/run_sycl_cts/action.yml

@@ -24,7 +24,7 @@ runs:
         target: ${{ inputs.target }}
 
     - name: Install Ninja
-      uses: llvm/actions/install-ninja@main
+      uses: llvm/actions/install-ninja@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
 
     - name: download ock artifact
       if: inputs.sycl_device == 'opencl'

.github/dockerfiles/Dockerfile_22.04-aarch64

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04
+FROM ubuntu:22.04@sha256:4e0171b9275e12d375863f2b3ae9ce00a4c53ddda176bd55868df97ac6f21a6e
 
 RUN apt-get update
 RUN apt-get -y install sudo

.github/dockerfiles/Dockerfile_22.04-x86-64

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04
+FROM ubuntu:22.04@sha256:4e0171b9275e12d375863f2b3ae9ce00a4c53ddda176bd55868df97ac6f21a6e
 
 RUN apt-get update 
 RUN apt-get install -y wget git build-essential

.github/dockerfiles/Dockerfile_24.04-x86-64

@@ -1,4 +1,4 @@
-FROM ubuntu:24.04
+FROM ubuntu:24.04@sha256:9cbed754112939e914291337b5e554b07ad7c392491dba6daf25eef1332a22e8
 
 RUN apt-get update 
 RUN apt-get install -y wget git build-essential

.github/workflows/pr_tests_cache.yml

@@ -140,7 +140,7 @@ jobs:
     runs-on: windows-2025
     steps:
       - name: Setup Windows llvm base
-        uses: llvm/actions/setup-windows@main
+        uses: llvm/actions/setup-windows@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
         with:
           arch: amd64
 
@@ -168,7 +168,7 @@ jobs:
     runs-on: windows-2025
     steps:
       - name: Setup Windows llvm base
-        uses: llvm/actions/setup-windows@main
+        uses: llvm/actions/setup-windows@a1ea791b03c8e61f53a0e66f2f73db283aa0f01e # main branch
         with:
           arch: amd64
 

.github/workflows/publish_docker_images.yml

@@ -26,7 +26,7 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v5
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
@@ -49,7 +49,7 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v5
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}