diff --git a/.github/workflows/build-validation.yml b/.github/workflows/build-validation.yml index 19d9695..24907ed 100644 --- a/.github/workflows/build-validation.yml +++ b/.github/workflows/build-validation.yml @@ -15,7 +15,7 @@ jobs: name: Rust build validation runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - run: cargo check --workspace @@ -27,7 +27,7 @@ jobs: run: working-directory: elixir-orchestration steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: erlef/setup-beam@v1 with: elixir-version: "1.17" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 39d6852..35e4ed1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,15 +35,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Initialize CodeQL - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1 + uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3.28.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1 + uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3.28.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/coq-build.yml b/.github/workflows/coq-build.yml index 95fef16..d6cd8e7 100644 --- a/.github/workflows/coq-build.yml +++ b/.github/workflows/coq-build.yml @@ -31,7 +31,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Install Coq run: | diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml index ea097a6..f183173 100644 --- a/.github/workflows/dogfood-gate.yml +++ b/.github/workflows/dogfood-gate.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Check for A2ML files id: detect diff --git a/.github/workflows/elixir-ci.yml b/.github/workflows/elixir-ci.yml index a1d1559..1a5235f 100644 --- a/.github/workflows/elixir-ci.yml +++ b/.github/workflows/elixir-ci.yml @@ -38,7 +38,7 @@ jobs: - elixir: "1.17" otp: "27" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: erlef/setup-beam@v1 with: elixir-version: ${{ matrix.elixir }} @@ -63,7 +63,7 @@ jobs: run: working-directory: elixir-orchestration steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: erlef/setup-beam@v1 with: elixir-version: "1.17" @@ -90,7 +90,7 @@ jobs: run: working-directory: elixir-orchestration steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: erlef/setup-beam@v1 with: elixir-version: "1.17" @@ -116,7 +116,7 @@ jobs: run: working-directory: elixir-orchestration steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: erlef/setup-beam@v1 with: diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 5a1fbed..bdf64f5 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -25,7 +25,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - name: Run core fuzz compile check @@ -40,7 +40,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - name: Run debugger fuzz compile check diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml index ef7bb09..f1ee480 100644 --- a/.github/workflows/rust-ci.yml +++ b/.github/workflows/rust-ci.yml @@ -28,7 +28,7 @@ jobs: name: rustfmt runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable with: components: rustfmt @@ -38,7 +38,7 @@ jobs: name: clippy (all-targets) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable with: components: clippy @@ -49,7 +49,7 @@ jobs: name: cargo test runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - run: cargo test --workspace --no-fail-fast @@ -60,7 +60,7 @@ jobs: env: RUSTDOCFLAGS: "-D warnings" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - run: cargo doc --workspace --no-deps @@ -69,7 +69,7 @@ jobs: name: cargo audit runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: rustsec/audit-check@v2.0.0 with: token: ${{ secrets.GITHUB_TOKEN }} @@ -78,7 +78,7 @@ jobs: name: cargo deny runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: EmbarkStudios/cargo-deny-action@v2 with: command: check advisories bans licenses sources @@ -87,7 +87,7 @@ jobs: name: benchmarks compile runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - run: cargo bench --no-run @@ -96,7 +96,7 @@ jobs: name: cargo-llvm-cov (≥60%) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable with: components: llvm-tools-preview @@ -122,7 +122,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - uses: taiki-e/install-action@v2 @@ -155,7 +155,7 @@ jobs: - fuzz/Cargo.toml - rust-core/fuzz/Cargo.toml steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.3 - uses: dtolnay/rust-toolchain@stable - uses: Swatinem/rust-cache@v2 - run: cargo check --manifest-path ${{ matrix.manifest }} diff --git a/.github/workflows/scorecard-enforcer.yml b/.github/workflows/scorecard-enforcer.yml index 5519b4d..e44424d 100644 --- a/.github/workflows/scorecard-enforcer.yml +++ b/.github/workflows/scorecard-enforcer.yml @@ -26,7 +26,7 @@ jobs: security-events: write id-token: write # For OIDC steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4 with: persist-credentials: false @@ -38,7 +38,7 @@ jobs: publish_results: true - name: Upload SARIF - uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3 + uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3 with: sarif_file: results.sarif @@ -61,7 +61,7 @@ jobs: check-critical: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4 - name: Check SECURITY.md exists run: | diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index a29025a..16fa651 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -14,6 +14,6 @@ permissions: jobs: scan: - uses: hyperpolymath/panic-attacker/.github/workflows/scan-and-report.yml@ea88be7da68e07249ae7df8b948ecb8ecfb9664c # main 2026-05-20 + uses: hyperpolymath/panic-attacker/.github/workflows/scan-and-report.yml@2dc1393c0ac982dbad98ba07f78a580d319456a5 # main 2026-05-20 secrets: VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}