ci: remove redundancies and add small fixes

Author: paul-gerber-svg

.github/workflows/pr.yml

@@ -5,6 +5,9 @@ on:
     branches: [develop, main]
   pull_request:
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -22,9 +25,9 @@ jobs:
       run:
         working-directory: ./etc/scripts
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
         with:
           python-version: ${{ env.X_PYTHON_MIN_VERSION }}
           cache: "pip"
@@ -76,15 +79,15 @@ jobs:
       run:
         working-directory: ./sdk
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Verify Matrix Version matches Global Version
       run: |
         if [ "${{ matrix.python-version }}" != "${{ env.X_PYTHON_MIN_VERSION }}" ] && [ "${{ matrix.python-version }}" != "${{ env.X_PYTHON_MAX_VERSION }}" ]; then
           echo "Error: Matrix version ${{ matrix.python-version }} does not match global version."
           exit 1
         fi
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ matrix.python-version }}
         cache: "pip"
@@ -116,9 +119,9 @@ jobs:
       run:
         working-directory: ./sdk
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
         cache: "pip"
@@ -141,9 +144,9 @@ jobs:
       run:
         working-directory: ./sdk
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
         cache: "pip"
@@ -153,7 +156,6 @@ jobs:
         python -m pip install --upgrade pip
         python -m pip install .[dev]
     - name: Check typing with MyPy
-      shell: bash
       run: |
         python -m mypy <(python -m codeblocks python README.md)
     - name: Check code style with PyCodestyle
@@ -170,9 +172,9 @@ jobs:
       run:
         working-directory: ./sdk
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MAX_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MAX_VERSION }}
         cache: "pip"
@@ -192,9 +194,9 @@ jobs:
       run:
         working-directory: ./sdk
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
     - name: Install dependencies
@@ -209,13 +211,9 @@ jobs:
     # This job checks that the copyright year in the header of all files is up to date
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         fetch-depth: 0  # Ensure full history is available
-    - name: Install required dependencies
-      run: |
-        sudo apt-get update
-        sudo apt-get install -y bash git
     - name: Run copyright check
       run: |
         chmod +x ./etc/scripts/set_copyright_year.sh
@@ -232,9 +230,9 @@ jobs:
         working-directory: ./compliance_tool
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ matrix.python-version }}
         cache: "pip"
@@ -261,9 +259,9 @@ jobs:
       run:
         working-directory: ./compliance_tool
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
         cache: "pip"
@@ -289,9 +287,9 @@ jobs:
       run:
         working-directory: ./compliance_tool
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
     - name: Install dependencies
@@ -302,10 +300,6 @@ jobs:
       run: |
         python -m build
 
- #server-test:
-    # TODO: This job runs the unittests on the python versions specified down at the matrix
-    #   and aas-test-engines on the server
-
 
   server-static-analysis:
     # This job runs static code analysis, namely pycodestyle and mypy
@@ -315,9 +309,9 @@ jobs:
       run:
         working-directory: ./server
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Set up Python ${{ env.X_PYTHON_MIN_VERSION }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@a26af69be951a213d95a4c3e4e4022e16d87065 # v5
       with:
         python-version: ${{ env.X_PYTHON_MIN_VERSION }}
         cache: "pip"
@@ -345,7 +339,7 @@ jobs:
       run:
         working-directory: ./server/docker/${{ matrix.service }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Build the Docker image
         run: |
           docker build -t basyx-python-${{ matrix.service }} -f Dockerfile ../../..