Skip to content

Commit 975f68e

Browse files
estebany-qdestebany-qd
authored
ci: Pin all gh actions to commit SHAs (#284)
1 parent c5b4d45 commit 975f68e

9 files changed

Lines changed: 59 additions & 59 deletions

‎.github/workflows/clean-datasets.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,8 @@ jobs:
1616
removeDatasetsVolume:
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/checkout@v3
20-
- uses: webfactory/ssh-agent@v0.8.0
19+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
20+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
2121
with:
2222
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
2323
- name: Benches
@@ -32,7 +32,7 @@ jobs:
3232
set -e
3333
- name: Send Notification
3434
if: failure()
35-
uses: slackapi/slack-github-action@v1.26.0
35+
uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0
3636
with:
3737
payload: |
3838
{

‎.github/workflows/continuous-benchmark-2.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,8 @@ jobs:
2222
runLoadTimeBenchmark:
2323
runs-on: ubuntu-latest
2424
steps:
25-
- uses: actions/checkout@v3
26-
- uses: webfactory/ssh-agent@v0.8.0
25+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
26+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
2727
with:
2828
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
2929
- name: Benches

‎.github/workflows/continuous-benchmark-hnsw.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,8 +32,8 @@ jobs:
3232
runs-on: ubuntu-latest
3333
container: alpine/ansible:2.18.1
3434
steps:
35-
- uses: actions/checkout@v3
36-
- uses: webfactory/ssh-agent@v0.8.0
35+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
36+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
3737
with:
3838
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
3939
- name: Create inventory
@@ -55,8 +55,8 @@ jobs:
5555
container: alpine/ansible:2.18.1
5656
needs: runUpdateHealingBenchmark
5757
steps:
58-
- uses: actions/checkout@v3
59-
- uses: webfactory/ssh-agent@v0.8.0
58+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
59+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
6060
with:
6161
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
6262
- name: Create inventory

‎.github/workflows/continuous-benchmark-transfer.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -88,8 +88,8 @@ jobs:
8888
fail-fast: true
8989
matrix: ${{ fromJSON(needs.generateMatrix.outputs.matrix) }}
9090
steps:
91-
- uses: actions/checkout@v4
92-
- uses: webfactory/ssh-agent@v0.8.0
91+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
92+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
9393
with:
9494
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
9595
- name: Setup CI tools
@@ -108,8 +108,8 @@ jobs:
108108
runs-on: ubuntu-latest
109109
container: alpine/ansible:2.18.1
110110
steps:
111-
- uses: actions/checkout@v4
112-
- uses: webfactory/ssh-agent@v0.8.0
111+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
112+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
113113
with:
114114
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
115115
- name: Create inventory
@@ -161,7 +161,7 @@ jobs:
161161
if: always()
162162
runs-on: ubuntu-latest
163163
steps:
164-
- uses: actions/checkout@v4
164+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
165165
- name: Setup CI tools
166166
run: bash -x tools/setup_ci.sh
167167
env:

‎.github/workflows/continuous-benchmark.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,8 @@ jobs:
2020
runBenchmark:
2121
runs-on: ubuntu-latest
2222
steps:
23-
- uses: actions/checkout@v3
24-
- uses: webfactory/ssh-agent@v0.8.0
23+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
24+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
2525
with:
2626
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
2727
- name: Benches
@@ -80,8 +80,8 @@ jobs:
8080
needs: runBenchmark
8181
if: ${{ always() }}
8282
steps:
83-
- uses: actions/checkout@v3
84-
- uses: webfactory/ssh-agent@v0.8.0
83+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
84+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
8585
with:
8686
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
8787
- name: Benches
@@ -136,8 +136,8 @@ jobs:
136136
needs: runTenantsBenchmark
137137
if: ${{ always() }}
138138
steps:
139-
- uses: actions/checkout@v3
140-
- uses: webfactory/ssh-agent@v0.8.0
139+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
140+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
141141
with:
142142
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
143143
- name: Benches

‎.github/workflows/manual-all-engines-benchmark.yaml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,8 @@ jobs:
1616
runs-on: ubuntu-latest
1717
timeout-minutes: 30
1818
steps:
19-
- uses: actions/checkout@v3
20-
- uses: dorny/paths-filter@v3
19+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
20+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
2121
id: changes
2222
with:
2323
filters: |
@@ -41,8 +41,8 @@ jobs:
4141
runs-on: ubuntu-latest
4242
timeout-minutes: 30
4343
steps:
44-
- uses: actions/checkout@v3
45-
- uses: dorny/paths-filter@v3
44+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
45+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
4646
id: changes
4747
with:
4848
filters: |
@@ -66,8 +66,8 @@ jobs:
6666
runs-on: ubuntu-latest
6767
timeout-minutes: 30
6868
steps:
69-
- uses: actions/checkout@v3
70-
- uses: dorny/paths-filter@v3
69+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
70+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
7171
id: changes
7272
with:
7373
filters: |
@@ -91,8 +91,8 @@ jobs:
9191
runs-on: ubuntu-latest
9292
timeout-minutes: 30
9393
steps:
94-
- uses: actions/checkout@v3
95-
- uses: dorny/paths-filter@v3
94+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
95+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
9696
id: changes
9797
with:
9898
filters: |
@@ -115,8 +115,8 @@ jobs:
115115
runs-on: ubuntu-latest
116116
timeout-minutes: 30
117117
steps:
118-
- uses: actions/checkout@v3
119-
- uses: dorny/paths-filter@v3
118+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
119+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
120120
id: changes
121121
with:
122122
filters: |
@@ -143,8 +143,8 @@ jobs:
143143
runs-on: ubuntu-latest
144144
timeout-minutes: 30
145145
steps:
146-
- uses: actions/checkout@v3
147-
- uses: dorny/paths-filter@v3
146+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
147+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
148148
id: changes
149149
with:
150150
filters: |
@@ -167,8 +167,8 @@ jobs:
167167
runs-on: ubuntu-latest
168168
timeout-minutes: 30
169169
steps:
170-
- uses: actions/checkout@v3
171-
- uses: dorny/paths-filter@v3
170+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
171+
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
172172
id: changes
173173
with:
174174
filters: |

‎.github/workflows/manual-benchmark.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -35,8 +35,8 @@ jobs:
3535
contents: read
3636
packages: write
3737
steps:
38-
- uses: actions/checkout@v3
39-
- uses: webfactory/ssh-agent@v0.8.0
38+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
39+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
4040
with:
4141
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
4242
- name: prepare image tag
@@ -51,17 +51,17 @@ jobs:
5151
echo "tag=${tag}" >> $GITHUB_OUTPUT
5252
- name: Set up Docker Buildx
5353
if: ${{ inputs.build_vector_db_image == 'true' }}
54-
uses: docker/setup-buildx-action@v3
54+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
5555
- name: Login to ghcr.io
5656
if: ${{ inputs.build_vector_db_image == 'true' }}
57-
uses: docker/login-action@v3
57+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
5858
with:
5959
registry: ghcr.io
6060
username: ${{ github.repository_owner }}
6161
password: ${{ secrets.GITHUB_TOKEN }}
6262
- name: Build Vector DB image
6363
if: ${{ inputs.build_vector_db_image == 'true' }}
64-
uses: docker/build-push-action@v6
64+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
6565
with:
6666
context: .
6767
push: true

‎.github/workflows/manual-benchmarks-cascade.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -64,11 +64,11 @@ jobs:
6464
workflow_run_ids: ${{ steps.prepare.outputs.workflow_run_ids }}
6565
machines_info: ${{ steps.prepare.outputs.machines_info }}
6666
steps:
67-
- uses: actions/checkout@v4
67+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
6868
with:
6969
ref: ${{ github.ref }}
7070
- name: Set up Python
71-
uses: actions/setup-python@v4
71+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
7272
with:
7373
python-version: '3.10.12'
7474
- name: Prepare benchmark matrix
@@ -206,10 +206,10 @@ jobs:
206206
server_name: ${{ steps.extract_names.outputs.server_name }}
207207
client_name: ${{ steps.extract_names.outputs.client_name }}
208208
steps:
209-
- uses: actions/checkout@v4
209+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
210210
with:
211211
ref: ${{ github.ref }}
212-
- uses: webfactory/ssh-agent@v0.8.0
212+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
213213
with:
214214
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
215215

@@ -255,10 +255,10 @@ jobs:
255255
matrix:
256256
config: ${{ fromJSON(needs.prepareBenchmarks.outputs.matrix) }}
257257
steps:
258-
- uses: actions/checkout@v4
258+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
259259
with:
260260
ref: ${{ github.ref }}
261-
- uses: webfactory/ssh-agent@v0.8.0
261+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
262262
with:
263263
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
264264

@@ -286,7 +286,7 @@ jobs:
286286
bash -x tools/run_ci.sh
287287
288288
- name: Upload benchmark results
289-
uses: actions/upload-artifact@v4
289+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
290290
with:
291291
name: results-${{ matrix.config.qdrant_version_sanitized }}-bench-${{ matrix.config.dataset }}-${{ matrix.config.engine_config }}-${{ matrix.config.index }}
292292
path: results/
@@ -321,7 +321,7 @@ jobs:
321321
container:
322322
image: python:3.11-slim
323323
steps:
324-
- uses: actions/checkout@v4
324+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
325325
with:
326326
ref: ${{ github.ref }}
327327
- name: Install dependencies
@@ -373,7 +373,7 @@ jobs:
373373
env:
374374
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
375375
- name: Upload all artifacts
376-
uses: actions/upload-artifact@v4
376+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
377377
with:
378378
name: all-unprocessed-results
379379
path: artifacts/
@@ -437,7 +437,7 @@ jobs:
437437
ls -la final_results/
438438
439439
- name: Upload processed results
440-
uses: actions/upload-artifact@v4
440+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
441441
with:
442442
name: final-processed-results
443443
path: final_results/
@@ -519,10 +519,10 @@ jobs:
519519
)
520520
runs-on: ubuntu-latest
521521
steps:
522-
- uses: actions/checkout@v4
522+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
523523
with:
524524
ref: ${{ github.ref }}
525-
- uses: webfactory/ssh-agent@v0.8.0
525+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
526526
with:
527527
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
528528
- name: Cleanup all machines

‎.github/workflows/manual-compare-versions-benchmark.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,8 @@ jobs:
3434
runs-on: ubuntu-latest
3535
timeout-minutes: 180
3636
steps:
37-
- uses: actions/checkout@v3
38-
- uses: webfactory/ssh-agent@v0.8.0
37+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
38+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
3939
with:
4040
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
4141
- name: Image for ${{ inputs.qdrant_version_1 }}
@@ -50,8 +50,8 @@ jobs:
5050
runs-on: ubuntu-latest
5151
timeout-minutes: 180
5252
steps:
53-
- uses: actions/checkout@v3
54-
- uses: webfactory/ssh-agent@v0.8.0
53+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
54+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
5555
with:
5656
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
5757
- name: Image for ${{ inputs.qdrant_version_2 }}
@@ -80,8 +80,8 @@ jobs:
8080
cpu: ${{ steps.bench.outputs.cpu }}
8181
cpu_telemetry: ${{ steps.bench.outputs.cpu_telemetry }}
8282
steps:
83-
- uses: actions/checkout@v3
84-
- uses: webfactory/ssh-agent@v0.8.0
83+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
84+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
8585
with:
8686
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
8787
- name: Bench ${{ inputs.qdrant_version_1 }}
@@ -119,8 +119,8 @@ jobs:
119119
cpu: ${{ steps.bench.outputs.cpu }}
120120
cpu_telemetry: ${{ steps.bench.outputs.cpu_telemetry }}
121121
steps:
122-
- uses: actions/checkout@v3
123-
- uses: webfactory/ssh-agent@v0.8.0
122+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
123+
- uses: webfactory/ssh-agent@d4b9b8ff72958532804b70bbe600ad43b36d5f2e # v0.8.0
124124
with:
125125
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
126126
- name: Bench ${{ inputs.qdrant_version_2 }}

0 commit comments

Comments
 (0)