Skip to content

Commit 86a1b8c

Browse files
YuriiMotovYuriiMotov
committed
🔒 Pin GitHub actions by commit SHA
1 parent ceb22b4 commit 86a1b8c

File tree

10 files changed

+36
-36
lines changed

10 files changed

+36
-36
lines changed

‎.github/workflows/add-to-project.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
name: Add to project
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/add-to-project@v1.0.2
15+
- uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
1616
with:
1717
project-url: https://github.com/orgs/fastapi/projects/2
1818
github-token: ${{ secrets.FASTAPI_PROJECTS_TOKEN }}

‎.github/workflows/detect-conflicts.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- name: Check if PRs have merge conflicts
16-
uses: eps1lon/actions-label-merge-conflict@v3
16+
uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
1717
with:
1818
dirtyLabel: conflicts
1919
repoToken: "${{ secrets.GITHUB_TOKEN }}"

‎.github/workflows/issue-manager.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
env:
2828
GITHUB_CONTEXT: ${{ toJson(github) }}
2929
run: echo "$GITHUB_CONTEXT"
30-
- uses: tiangolo/issue-manager@0.6.0
30+
- uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
3131
with:
3232
token: ${{ secrets.GITHUB_TOKEN }}
3333
config: >

‎.github/workflows/labeler.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
pull-requests: write
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/labeler@v6
19+
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
2020
if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
2121
- run: echo "Done adding labels"
2222
# Run this after labeler applied labels
@@ -27,7 +27,7 @@ jobs:
2727
pull-requests: read
2828
runs-on: ubuntu-latest
2929
steps:
30-
- uses: docker://agilepathway/pull-request-label-checker:latest
30+
- uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
3131
with:
3232
one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
3333
repo_token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/latest-changes.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,17 +24,17 @@ jobs:
2424
env:
2525
GITHUB_CONTEXT: ${{ toJson(github) }}
2626
run: echo "$GITHUB_CONTEXT"
27-
- uses: actions/checkout@v6
27+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2828
with:
2929
# To allow latest-changes to commit to the main branch
3030
token: ${{ secrets.ANNOTATED_DOC_LATEST_CHANGES }}
3131
# Allow debugging with tmate
3232
- name: Setup tmate session
33-
uses: mxschmitt/action-tmate@v3
33+
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
3434
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
3535
with:
3636
limit-access-to-actor: true
37-
- uses: tiangolo/latest-changes@0.4.1
37+
- uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
3838
with:
3939
token: ${{ secrets.GITHUB_TOKEN }}
4040
latest_changes_file: release-notes.md

‎.github/workflows/pre-commit.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
env:
1919
GITHUB_CONTEXT: ${{ toJson(github) }}
2020
run: echo "$GITHUB_CONTEXT"
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
name: Checkout PR for own repo
2323
if: env.HAS_SECRETS == 'true'
2424
with:
@@ -30,19 +30,19 @@ jobs:
3030
# A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
3131
token: ${{ secrets.PRE_COMMIT }}
3232
# pre-commit lite ci needs the default checkout configs to work
33-
- uses: actions/checkout@v6
33+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434
name: Checkout PR for fork
3535
if: env.HAS_SECRETS == 'false'
3636
with:
3737
# To be able to commit it needs the head branch of the PR, the remote one
3838
ref: ${{ github.event.pull_request.head.sha }}
3939
fetch-depth: 0
4040
- name: Set up Python
41-
uses: actions/setup-python@v6
41+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4242
with:
4343
python-version-file: ".python-version"
4444
- name: Setup uv
45-
uses: astral-sh/setup-uv@v7
45+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
4646
with:
4747
cache-dependency-glob: |
4848
pyproject.toml
@@ -63,7 +63,7 @@ jobs:
6363
git commit -m "🎨 Auto format"
6464
git push
6565
fi
66-
- uses: pre-commit-ci/lite-action@v1.1.0
66+
- uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
6767
if: env.HAS_SECRETS == 'false'
6868
with:
6969
msg: 🎨 Auto format
@@ -83,6 +83,6 @@ jobs:
8383
GITHUB_CONTEXT: ${{ toJson(github) }}
8484
run: echo "$GITHUB_CONTEXT"
8585
- name: Decide whether the needed jobs succeeded or failed
86-
uses: re-actors/alls-green@release/v1
86+
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
8787
with:
8888
jobs: ${{ toJSON(needs) }}

‎.github/workflows/publish.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,13 @@ jobs:
1616
env:
1717
GITHUB_CONTEXT: ${{ toJson(github) }}
1818
run: echo "$GITHUB_CONTEXT"
19-
- uses: actions/checkout@v6
19+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2020
- name: Set up Python
21-
uses: actions/setup-python@v6
21+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2222
with:
2323
python-version-file: ".python-version"
2424
- name: Install uv
25-
uses: astral-sh/setup-uv@v7
25+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2626
- name: Build distribution
2727
run: uv build
2828
- name: Publish

‎.github/workflows/smokeshow.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,18 +19,18 @@ jobs:
1919
env:
2020
GITHUB_CONTEXT: ${{ toJson(github) }}
2121
run: echo "$GITHUB_CONTEXT"
22-
- uses: actions/checkout@v6
23-
- uses: actions/setup-python@v6
22+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
23+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2424
with:
2525
python-version-file: ".python-version"
2626
- name: Setup uv
27-
uses: astral-sh/setup-uv@v7
27+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2828
with:
2929
cache-dependency-glob: |
3030
pyproject.toml
3131
uv.lock
3232
- run: uv sync --locked --no-dev --group tests
33-
- uses: actions/download-artifact@v8
33+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
3434
with:
3535
name: coverage-html
3636
path: htmlcov

‎.github/workflows/test-redistribute.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ jobs:
1717
env:
1818
GITHUB_CONTEXT: ${{ toJson(github) }}
1919
run: echo "$GITHUB_CONTEXT"
20-
- uses: actions/checkout@v6
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2121
- name: Set up Python
22-
uses: actions/setup-python@v6
22+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2323
with:
2424
python-version-file: ".python-version"
2525
- name: Install build dependencies
@@ -51,6 +51,6 @@ jobs:
5151
runs-on: ubuntu-latest
5252
steps:
5353
- name: Decide whether the needed jobs succeeded or failed
54-
uses: re-actors/alls-green@release/v1
54+
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
5555
with:
5656
jobs: ${{ toJSON(needs) }}

‎.github/workflows/test.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -61,21 +61,21 @@ jobs:
6161
UV_PYTHON: ${{ matrix.python-version }}
6262
UV_RESOLUTION: ${{ matrix.uv-resolution }}
6363
steps:
64-
- uses: actions/checkout@v6
64+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6565
- name: Set up Python
66-
uses: actions/setup-python@v6
66+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
6767
with:
6868
python-version: ${{ matrix.python-version }}
6969
- name: Setup uv
70-
uses: astral-sh/setup-uv@v7
70+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
7171
with:
7272
enable-cache: true
7373
cache-dependency-glob: |
7474
pyproject.toml
7575
uv.lock
7676
# Allow debugging with tmate
7777
- name: Setup tmate session
78-
uses: mxschmitt/action-tmate@v3
78+
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
7979
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
8080
with:
8181
limit-access-to-actor: true
@@ -90,7 +90,7 @@ jobs:
9090
COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}
9191
CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
9292
- name: Store coverage files
93-
uses: actions/upload-artifact@v7
93+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
9494
with:
9595
name: coverage-${{ runner.os }}-${{ matrix.python-version }}
9696
path: coverage
@@ -101,26 +101,26 @@ jobs:
101101
- test
102102
runs-on: ubuntu-latest
103103
steps:
104-
- uses: actions/checkout@v6
105-
- uses: actions/setup-python@v6
104+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
105+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
106106
with:
107107
python-version-file: ".python-version"
108108
- name: Setup uv
109-
uses: astral-sh/setup-uv@v7
109+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
110110
with:
111111
enable-cache: true
112112
cache-dependency-glob: |
113113
pyproject.toml
114114
uv.lock
115115
- name: Get coverage files
116-
uses: actions/download-artifact@v8
116+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
117117
with:
118118
pattern: coverage-*
119119
path: coverage
120120
merge-multiple: true
121121
# Allow debugging with tmate
122122
- name: Setup tmate session
123-
uses: mxschmitt/action-tmate@v3
123+
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
124124
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
125125
with:
126126
limit-access-to-actor: true
@@ -130,7 +130,7 @@ jobs:
130130
- run: uv run coverage combine coverage
131131
- run: uv run coverage html --title "Coverage for ${{ github.sha }}"
132132
- name: Store coverage HTML
133-
uses: actions/upload-artifact@v7
133+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
134134
with:
135135
name: coverage-html
136136
path: htmlcov
@@ -145,6 +145,6 @@ jobs:
145145
runs-on: ubuntu-latest
146146
steps:
147147
- name: Decide whether the needed jobs succeeded or failed
148-
uses: re-actors/alls-green@release/v1
148+
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
149149
with:
150150
jobs: ${{ toJSON(needs) }}

0 commit comments

Comments
 (0)