Skip to content

Commit 94454c0

Browse files
committed
run ratchet
1 parent 0c7be47 commit 94454c0

13 files changed

Lines changed: 205 additions & 213 deletions

.github/workflows/android.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
matrix_architecture: ${{ steps.export-result.outputs.matrix_architecture }}
2828
matrix_python_version: ${{ steps.export-result.outputs.matrix_python_version }}
2929
steps:
30-
- uses: actions/checkout@v3
30+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
3131
with:
3232
submodules: false
3333
- name: Use expanded matrix
@@ -60,7 +60,7 @@ jobs:
6060
- os: macos-15
6161
architecture: x64
6262
steps:
63-
- uses: lukka/get-cmake@latest
63+
- uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # ratchet:lukka/get-cmake@latest
6464
with:
6565
cmakeVersion: "~3.31.0"
6666
- name: setup Xcode version (macos)
@@ -91,7 +91,7 @@ jobs:
9191
echo "Enabling expanded build and test matrix."
9292
echo "USE_EXPANDED_MATRIX=1" >> $GITHUB_ENV
9393
94-
- uses: actions/checkout@v3
94+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
9595
with:
9696
submodules: true
9797

@@ -105,18 +105,18 @@ jobs:
105105
MATRIX_ARCHITECTURE: ${{ matrix.architecture }}
106106

107107
- name: Setup python
108-
uses: actions/setup-python@v4
108+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
109109
with:
110110
python-version: ${{ matrix.python_version }}
111111
architecture: ${{ matrix.architecture }}
112112

113113
- name: Add msbuild to PATH
114114
if: startsWith(matrix.os, 'windows')
115-
uses: microsoft/setup-msbuild@v1.1
115+
uses: microsoft/setup-msbuild@34cfbaee7f672c76950673338facd8a73f637506 # ratchet:microsoft/setup-msbuild@v1.1
116116

117117
- name: Cache NDK
118118
id: cache_ndk
119-
uses: actions/cache@v3
119+
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # ratchet:actions/cache@v3
120120
with:
121121
path: /tmp/android-ndk-r21e
122122
key: android-ndk-${{ matrix.os }}-r21e
@@ -161,7 +161,7 @@ jobs:
161161
162162
- name: Cache ccache files
163163
id: cache_ccache
164-
uses: actions/cache@v3
164+
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # ratchet:actions/cache@v3
165165
with:
166166
path: ccache_dir
167167
key: dev-test-ccache-${{ env.MATRIX_UNIQUE_NAME }}

.github/workflows/build-report.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,22 +26,22 @@ jobs:
2626
if: ${{ matrix.test_set == 'firestore' }}
2727
run: sleep 300
2828
- name: Setup python
29-
uses: actions/setup-python@v4
29+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
3030
with:
3131
python-version: 3.9
32-
- uses: actions/checkout@v3
32+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
3333
with:
3434
fetch-depth: 0
3535
- name: Install Desktop SDK prerequisites
36-
uses: nick-invision/retry@v2
36+
uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4 # ratchet:nick-invision/retry@v2
3737
with:
3838
timeout_minutes: 15
3939
max_attempts: 3
4040
command: |
4141
python3 scripts/gha/install_prereqs_desktop.py --gha_build
4242
python3 -m pip install requests python-dateutil progress attrs
4343
- name: Fetch GitHub jobs (with retry)
44-
uses: nick-invision/retry@v2
44+
uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4 # ratchet:nick-invision/retry@v2
4545
with:
4646
timeout_minutes: 20
4747
max_attempts: 3
@@ -53,7 +53,7 @@ jobs:
5353
fi
5454
python3 scripts/gha/report_build_status.py --token ${{ github.token }} --days ${{ env.numDays }} --write_cache build_status_short.cache ${extra_flags}
5555
- name: Fetch extended GitHub jobs (with retry)
56-
uses: nick-invision/retry@v2
56+
uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4 # ratchet:nick-invision/retry@v2
5757
with:
5858
timeout_minutes: 80
5959
max_attempts: 3
@@ -103,7 +103,7 @@ jobs:
103103
run: |
104104
cat comment.md
105105
- name: Update GitHub issue (with retry)
106-
uses: nick-invision/retry@v2
106+
uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4 # ratchet:nick-invision/retry@v2
107107
with:
108108
timeout_minutes: 5
109109
max_attempts: 3

.github/workflows/checks.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,11 @@ jobs:
2121
file_format_check:
2222
runs-on: ubuntu-22.04
2323
steps:
24-
- uses: actions/checkout@v3
24+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
2525
with:
2626
submodules: false
2727
- name: Setup python
28-
uses: actions/setup-python@v4
28+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
2929
with:
3030
python-version: 3.9
3131
- name: Install prerequisites
@@ -44,7 +44,7 @@ jobs:
4444
# This check fails if integration tests are queued, in progress, or failed.
4545
runs-on: ubuntu-22.04
4646
steps:
47-
- uses: docker://agilepathway/pull-request-label-checker:latest
47+
- uses: docker://index.docker.io/agilepathway/pull-request-label-checker@sha256:14f5f3dfda922496d07d53494e2d2b42885165f90677a1c03d600059b7706a61 # ratchet:docker://agilepathway/pull-request-label-checker:latest
4848
with:
4949
none_of: "${{ env.statusLabelInProgress }},${{ env.statusLabelFailed }},${{ env.triggerLabelFull }},${{ env.triggerLabelQuick }}"
5050
repo_token: ${{ github.token }}
@@ -53,14 +53,14 @@ jobs:
5353
# This check succeeds if Doxygen documentation generates without errors.
5454
runs-on: ubuntu-22.04
5555
steps:
56-
- uses: lukka/get-cmake@latest
56+
- uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # ratchet:lukka/get-cmake@latest
5757
with:
5858
cmakeVersion: "~3.31.0"
59-
- uses: actions/checkout@v3
59+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
6060
with:
6161
submodules: false
6262
- name: Setup python
63-
uses: actions/setup-python@v4
63+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
6464
with:
6565
python-version: 3.9
6666
- name: Install prerequisites
@@ -95,7 +95,7 @@ jobs:
9595
# Check for Google copyright in each file.
9696
runs-on: ubuntu-22.04
9797
steps:
98-
- uses: actions/checkout@v3
98+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
9999
with:
100100
submodules: false
101101
- name: Run check_copyright.sh
@@ -107,7 +107,7 @@ jobs:
107107
# Check that the readme was updated, unless the PR has a specific label set (env.skipReleaseNotesLabel).
108108
runs-on: ubuntu-22.04
109109
steps:
110-
- uses: actions/checkout@v3
110+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
111111
# Skip this if the PR has the skipReleaseNotes label or if it's a merge to other than main.
112112
if: ${{!contains(github.event.pull_request.labels.*.name, env.skipReleaseNotesLabel) && (github.event.pull_request.base.ref == 'main')}}
113113
with:

.github/workflows/checks_secure.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,19 +19,19 @@ jobs:
1919
steps:
2020
- name: Check user permission
2121
id: check
22-
uses: scherermichael-oss/action-has-permission@1.0.6
22+
uses: scherermichael-oss/action-has-permission@136e061bfe093832d87f090dd768e14e27a740d3 # ratchet:scherermichael-oss/action-has-permission@1.0.6
2323
# This action sets outputs.has-permission to '1' or ''
2424
with:
2525
required-permission: write
2626
env:
2727
GITHUB_TOKEN: ${{ github.token }}
28-
- uses: actions/checkout@v3
28+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # ratchet:actions/checkout@v3
2929
if: steps.check.outputs.has-permission != 1 || github.event.pull_request.head.repo.full_name != github.repository
3030
with:
3131
submodules: false
3232
- name: Setup python
3333
if: steps.check.outputs.has-permission != 1 || github.event.pull_request.head.repo.full_name != github.repository
34-
uses: actions/setup-python@v4
34+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # ratchet:actions/setup-python@v4
3535
with:
3636
python-version: 3.9
3737
- name: Install prerequisites

0 commit comments

Comments
 (0)