@@ -40,14 +40,14 @@ jobs:
4040 run : |
4141 find . -name . -o -prune -exec rm -rf -- {} +
4242
43- - uses : actions/checkout@v4
43+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4444
4545 # Run the case checker action
4646 - name : Check Case Sensitivity
47- uses : credfeto/action-case-checker@v1.3.0
47+ uses : credfeto/action-case-checker@cb652aeab29ed363bbdb7d9ee1bfcc010c46cac5 # v1.3.0
4848
4949 - name : Look for ignored files
50- uses : credfeto/action-no-ignored-files@v1.2.0
50+ uses : credfeto/action-no-ignored-files@4fccae50720d89bef0cd9dc99a85a19b765d2e70 # v1.2.0
5151
5252 - name : " Check for Lean files with the executable bit set"
5353 shell : bash
6262
6363 - name : install Python
6464 if : ${{ 'bors' == 'ubuntu-latest' }}
65- uses : actions/setup-python@v5
65+ uses : actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
6666 with :
6767 python-version : 3.8
6868
@@ -106,7 +106,7 @@ jobs:
106106
107107 # The Hoskinson runners may not have jq installed, so do that now.
108108 - name : ' Setup jq'
109- uses : dcarbone/install-jq-action@v2.1.0
109+ uses : dcarbone/install-jq-action@e397bd87438d72198f81efd21f876461183d383a # v3.0.1
110110
111111 - name : install elan
112112 run : |
@@ -115,7 +115,7 @@ jobs:
115115 ./elan-init -y --default-toolchain none
116116 echo "$HOME/.elan/bin" >> "${GITHUB_PATH}"
117117
118- - uses : actions/checkout@v4
118+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
119119
120120 - name : If using a lean-pr-release toolchain, uninstall
121121 run : |
@@ -178,7 +178,7 @@ jobs:
178178
179179 - name : build mathlib
180180 id : build
181- uses : liskin/gh-problem-matcher-wrap@v3
181+ uses : liskin/gh-problem-matcher-wrap@e7b7beaaafa52524748b31a381160759d68d61fb # v3.0.0
182182 with :
183183 linters : gcc
184184 run : |
@@ -280,7 +280,7 @@ jobs:
280280 run : lake exe graph
281281
282282 - name : upload the import graph
283- uses : actions/upload-artifact@v4
283+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
284284 with :
285285 name : import-graph
286286 path : import_graph.dot
@@ -298,23 +298,23 @@ jobs:
298298
299299 - name : test mathlib
300300 id : test
301- uses : liskin/gh-problem-matcher-wrap@v3
301+ uses : liskin/gh-problem-matcher-wrap@e7b7beaaafa52524748b31a381160759d68d61fb # v3.0.0
302302 with :
303303 linters : gcc
304304 run :
305305 lake --iofail test
306306
307307 - name : check for unused imports
308308 id : shake
309- uses : liskin/gh-problem-matcher-wrap@v3
309+ uses : liskin/gh-problem-matcher-wrap@e7b7beaaafa52524748b31a381160759d68d61fb # v3.0.0
310310 with :
311311 linters : gcc
312312 run : env LEAN_ABORT_ON_PANIC=1 lake exe shake --gh-style
313313
314314 - name : lint mathlib
315315 if : ${{ always() && steps.build.outcome == 'success' || steps.build.outcome == 'failure' }}
316316 id : lint
317- uses : liskin/gh-problem-matcher-wrap@v3
317+ uses : liskin/gh-problem-matcher-wrap@e7b7beaaafa52524748b31a381160759d68d61fb # v3.0.0
318318 with :
319319 linters : gcc
320320 run : env LEAN_ABORT_ON_PANIC=1 lake exe runLinter Mathlib
@@ -363,10 +363,10 @@ jobs:
363363 needs : [style_lint, build]
364364 runs-on : ubuntu-latest
365365 steps :
366- - uses : actions/checkout@v4
366+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
367367
368368 - id : PR
369- uses : 8BitJonny/gh-get-current-pr@3.0.0
369+ uses : 8BitJonny/gh-get-current-pr@08e737c57a3a4eb24cec6487664b243b77eb5e36 # 3.0.0
370370 # TODO: this may not work properly if the same commit is pushed to multiple branches:
371371 # https://github.com/8BitJonny/gh-get-current-pr/issues/8
372372 with :
@@ -376,7 +376,7 @@ jobs:
376376
377377 - if : contains(steps.PR.outputs.pr_labels, 'bench-after-CI')
378378 name : If `bench-after-CI` is present, add a `!bench` comment.
379- uses : GrantBirki/comment@v2
379+ uses : GrantBirki/comment@f524ee31407667c05061bad41e1758b40298bd82 # v2.1.0
380380 with :
381381 token : ${{ secrets.AUTO_MERGE_TOKEN }}
382382 issue-number : ${{ steps.PR.outputs.number }}
@@ -394,7 +394,7 @@ jobs:
394394
395395 - if : contains(steps.PR.outputs.pr_labels, 'auto-merge-after-CI')
396396 name : If `auto-merge-after-CI` is present, add a `bors merge` comment.
397- uses : GrantBirki/comment@v2
397+ uses : GrantBirki/comment@f524ee31407667c05061bad41e1758b40298bd82 # v2.1.0
398398 with :
399399 token : ${{ secrets.AUTO_MERGE_TOKEN }}
400400 issue-number : ${{ steps.PR.outputs.number }}
0 commit comments