Skip to content

Commit 0fd8e7b

Browse files
joshuarlijoshuarli
committed
chore: pin GitHub Actions to full-length commit SHAs
1 parent 0a3001e commit 0fd8e7b

5 files changed

Lines changed: 45 additions & 45 deletions

File tree

‎.github/workflows/changelog-preview.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,5 @@ permissions:
1515

1616
jobs:
1717
changelog-preview:
18-
uses: getsentry/craft/.github/workflows/changelog-preview.yml@v2
18+
uses: getsentry/craft/.github/workflows/changelog-preview.yml@f4889d04564e47311038ecb6b910fef6b6cf1363 # v2
1919
secrets: inherit

‎.github/workflows/checks.yml‎

Lines changed: 38 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -12,18 +12,18 @@ jobs:
1212
name: Build packages
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/checkout@v4
16-
- uses: actions/setup-node@v4
15+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
16+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
1717
with:
1818
node-version-file: "package.json"
1919
- name: Use dependency cache
20-
uses: actions/cache@v4
20+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
2121
id: dependency-cache
2222
with:
2323
path: "**/node_modules"
2424
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
2525
- name: Use build cache
26-
uses: actions/cache@v4
26+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
2727
with:
2828
path: .nxcache
2929
key: build-cache-key-${{ runner.os }}-${{ github.run_id }}
@@ -34,7 +34,7 @@ jobs:
3434
if: steps.dependency-cache.outputs.cache-hit != 'true'
3535
- run: yarn build
3636
- name: Upload build artifacts
37-
uses: actions/upload-artifact@v4
37+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
3838
with:
3939
name: dist-artifacts-${{ github.run_id }}
4040
path: packages/*/dist
@@ -45,18 +45,18 @@ jobs:
4545
name: Typing check
4646
runs-on: ubuntu-latest
4747
steps:
48-
- uses: actions/checkout@v4
49-
- uses: actions/setup-node@v4
48+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
49+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
5050
with:
5151
node-version-file: "package.json"
5252
- name: Use dependency cache
53-
uses: actions/cache@v4
53+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
5454
id: dependency-cache
5555
with:
5656
path: "**/node_modules"
5757
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
5858
- name: Use build cache
59-
uses: actions/cache@v4
59+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
6060
with:
6161
path: .nxcache
6262
key: build-cache-key-${{ runner.os }}-${{ github.run_id }}
@@ -71,18 +71,18 @@ jobs:
7171
name: Formatting check
7272
runs-on: ubuntu-latest
7373
steps:
74-
- uses: actions/checkout@v4
75-
- uses: actions/setup-node@v4
74+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
75+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
7676
with:
7777
node-version-file: "package.json"
7878
- name: Use dependency cache
79-
uses: actions/cache@v4
79+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
8080
id: dependency-cache
8181
with:
8282
path: "**/node_modules"
8383
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
8484
- name: Use build cache
85-
uses: actions/cache@v4
85+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
8686
with:
8787
path: .nxcache
8888
key: build-cache-key-${{ runner.os }}-${{ github.run_id }}
@@ -98,18 +98,18 @@ jobs:
9898
name: Unit Tests
9999
runs-on: ubuntu-latest
100100
steps:
101-
- uses: actions/checkout@v4
102-
- uses: actions/setup-node@v4
101+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
102+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
103103
with:
104104
node-version-file: "package.json"
105105
- name: Use dependency cache
106-
uses: actions/cache@v4
106+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
107107
id: dependency-cache
108108
with:
109109
path: "**/node_modules"
110110
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
111111
- name: Use build cache
112-
uses: actions/cache@v4
112+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
113113
with:
114114
path: .nxcache
115115
key: build-cache-key-${{ runner.os }}-${{ github.run_id }}
@@ -119,7 +119,7 @@ jobs:
119119
run: yarn --frozen-lockfile --ignore-engines
120120
if: steps.dependency-cache.outputs.cache-hit != 'true'
121121
- name: Download build artifacts
122-
uses: actions/download-artifact@v4
122+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
123123
with:
124124
name: dist-artifacts-${{ github.run_id }}
125125
path: packages
@@ -135,12 +135,12 @@ jobs:
135135
os: [ubuntu-latest, windows-latest]
136136
runs-on: ${{ matrix.os }}
137137
steps:
138-
- uses: actions/checkout@v4
139-
- uses: actions/setup-node@v4
138+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
139+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
140140
with:
141141
node-version: ${{ matrix.node-version }}
142142
- name: Use dependency cache
143-
uses: actions/cache@v4
143+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
144144
id: dependency-cache
145145
with:
146146
path: "**/node_modules"
@@ -149,7 +149,7 @@ jobs:
149149
run: yarn --frozen-lockfile --ignore-engines
150150
if: steps.dependency-cache.outputs.cache-hit != 'true'
151151
- name: Download build artifacts
152-
uses: actions/download-artifact@v4
152+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
153153
with:
154154
name: dist-artifacts-${{ github.run_id }}
155155
path: packages
@@ -165,12 +165,12 @@ jobs:
165165
os: [ubuntu-latest, windows-latest]
166166
runs-on: ${{ matrix.os }}
167167
steps:
168-
- uses: actions/checkout@v4
169-
- uses: actions/setup-node@v4
168+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
169+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
170170
with:
171171
node-version: ${{ matrix.node-version }}
172172
- name: Use dependency cache
173-
uses: actions/cache@v4
173+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
174174
id: dependency-cache
175175
with:
176176
path: "**/node_modules"
@@ -179,7 +179,7 @@ jobs:
179179
run: yarn --frozen-lockfile --ignore-engines
180180
if: steps.dependency-cache.outputs.cache-hit != 'true'
181181
- name: Download build artifacts
182-
uses: actions/download-artifact@v4
182+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
183183
with:
184184
name: dist-artifacts-${{ github.run_id }}
185185
path: packages
@@ -198,16 +198,16 @@ jobs:
198198
env:
199199
SENTRY_AUTH_TOKEN: ${{ secrets.E2E_TESTS_SENTRY_AUTH_TOKEN }}
200200
steps:
201-
- uses: actions/checkout@v4
202-
- uses: volta-cli/action@v3
201+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
202+
- uses: volta-cli/action@007b1509d3ea9999dbba62ca34f4eb968363bb78 # v3
203203
- name: Use dependency cache
204-
uses: actions/cache@v4
204+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
205205
id: dependency-cache
206206
with:
207207
path: "**/node_modules"
208208
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
209209
- name: Use build cache
210-
uses: actions/cache@v4
210+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
211211
with:
212212
path: .nxcache
213213
key: build-cache-key-${{ runner.os }}-${{ matrix.target }}-${{ matrix.jobIndex }}-${{ github.run_id }}
@@ -217,7 +217,7 @@ jobs:
217217
run: yarn --frozen-lockfile --ignore-engines
218218
if: steps.dependency-cache.outputs.cache-hit != 'true'
219219
- name: Download build artifacts
220-
uses: actions/download-artifact@v4
220+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
221221
with:
222222
name: dist-artifacts-${{ github.run_id }}
223223
path: packages
@@ -228,18 +228,18 @@ jobs:
228228
name: Linter check
229229
runs-on: ubuntu-latest
230230
steps:
231-
- uses: actions/checkout@v4
232-
- uses: actions/setup-node@v4
231+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
232+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
233233
with:
234234
node-version-file: "package.json"
235235
- name: Use dependency cache
236-
uses: actions/cache@v4
236+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
237237
id: dependency-cache
238238
with:
239239
path: "**/node_modules"
240240
key: ${{ runner.os }}-${{ hashFiles('**/package.json') }}-${{ hashFiles('**/yarn.lock') }}
241241
- name: Use build cache
242-
uses: actions/cache@v4
242+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
243243
with:
244244
path: .nxcache
245245
key: build-cache-key-${{ runner.os }}-${{ github.run_id }}
@@ -257,16 +257,16 @@ jobs:
257257
# Build artifacts are only needed for releasing workflow.
258258
if: startsWith(github.ref, 'refs/heads/release/')
259259
steps:
260-
- uses: actions/checkout@v4
261-
- uses: actions/setup-node@v4
260+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
261+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
262262
with:
263263
node-version-file: "package.json"
264264
- name: Install dependencies
265265
run: yarn --frozen-lockfile
266266
- name: pack
267267
run: yarn build:npm
268268
- name: archive artifacts
269-
uses: actions/upload-artifact@v4
269+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
270270
with:
271271
name: ${{ github.sha }}
272272
path: |

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,11 +41,11 @@ jobs:
4141

4242
steps:
4343
- name: Checkout repository
44-
uses: actions/checkout@v4
44+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
4545

4646
# Initializes the CodeQL tools for scanning.
4747
- name: Initialize CodeQL
48-
uses: github/codeql-action/init@v2
48+
uses: github/codeql-action/init@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2
4949
with:
5050
languages: ${{ matrix.language }}
5151
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
5656
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5757
# If this step fails, then you should remove it and run the build manually (see below)
5858
- name: Autobuild
59-
uses: github/codeql-action/autobuild@v2
59+
uses: github/codeql-action/autobuild@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2
6060

6161
# ℹ️ Command-line programs to run using the OS shell.
6262
# 📚 https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions
@@ -70,4 +70,4 @@ jobs:
7070
# make release
7171

7272
- name: Perform CodeQL Analysis
73-
uses: github/codeql-action/analyze@v2
73+
uses: github/codeql-action/analyze@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2

‎.github/workflows/enforce-license-complience.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,6 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: "Enforce License Compliance"
14-
uses: getsentry/action-enforce-license-compliance@main
14+
uses: getsentry/action-enforce-license-compliance@48236a773346cb6552a7bda1ee370d2797365d87 # main
1515
with:
1616
fossa_api_key: ${{ secrets.FOSSA_API_KEY }}

‎.github/workflows/release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
with:
2727
app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }}
2828
private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}
29-
- uses: actions/checkout@v4
29+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3030
with:
3131
token: ${{ steps.token.outputs.token }}
3232
fetch-depth: 0

0 commit comments

Comments
 (0)