Skip to content

Commit 477b527

Browse files
breedx-splklaurit
breedx-splk
and
laurit
authored
actions now pinned to version hash (#2740)
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
1 parent 5b5a347 commit 477b527

7 files changed

Lines changed: 76 additions & 78 deletions

File tree

‎.github/workflows/ci.yaml‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -20,16 +20,16 @@ jobs:
2020
build:
2121
runs-on: ubuntu-24.04
2222
steps:
23-
- uses: actions/checkout@v6.0.2
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424

2525
- name: Set up JDK 17 for running Gradle
26-
uses: actions/setup-java@v5.2.0
26+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
2727
with:
2828
distribution: temurin
2929
java-version: 17
3030

3131
- name: Cache Gradle Wrapper
32-
uses: actions/cache@v5.0.4
32+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
3333
with:
3434
path: ~/.gradle/wrapper
3535
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -44,16 +44,16 @@ jobs:
4444
test-latest-deps:
4545
runs-on: ubuntu-24.04
4646
steps:
47-
- uses: actions/checkout@v6.0.2
47+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4848

4949
- name: Set up JDK 17 for running Gradle
50-
uses: actions/setup-java@v5.2.0
50+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
5151
with:
5252
distribution: temurin
5353
java-version: 17
5454

5555
- name: Cache Gradle Wrapper
56-
uses: actions/cache@v5.0.4
56+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
5757
with:
5858
path: ~/.gradle/wrapper
5959
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -71,16 +71,16 @@ jobs:
7171
matrix: ${{ steps.set-matrix.outputs.matrix }}
7272
steps:
7373
- name: Check out repository
74-
uses: actions/checkout@v6.0.2
74+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7575

7676
- name: Set up JDK 17 for running Gradle
77-
uses: actions/setup-java@v5.2.0
77+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
7878
with:
7979
distribution: temurin
8080
java-version: 17
8181

8282
- name: Cache Gradle Wrapper
83-
uses: actions/cache@v5.0.4
83+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
8484
with:
8585
path: ~/.gradle/wrapper
8686
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -96,23 +96,23 @@ jobs:
9696
fail-fast: false
9797
steps:
9898
- name: Check out repository
99-
uses: actions/checkout@v6.0.2
99+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
100100

101101
- name: Set up JDK 17 for running Gradle
102-
uses: actions/setup-java@v5.2.0
102+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
103103
with:
104104
distribution: temurin
105105
java-version: 17
106106

107107
- name: Cache Gradle Wrapper
108-
uses: actions/cache@v5.0.4
108+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
109109
with:
110110
path: ~/.gradle/wrapper
111111
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
112112

113113
- name: Run muzzle
114114
# using retry because of sporadic gradle download failures
115-
uses: nick-invision/retry@v4.0.0
115+
uses: nick-invision/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
116116
with:
117117
# timing out has not been a problem, these jobs typically finish in 2-3 minutes
118118
timeout_minutes: 15
@@ -134,25 +134,25 @@ jobs:
134134
suite: profiler
135135
fail-fast: false
136136
steps:
137-
- uses: actions/checkout@v6.0.2
137+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
138138

139139
- name: Free disk space
140140
run: .github/scripts/gha-free-disk-space.sh
141141

142142
- name: Set up JDK 17 for running Gradle
143-
uses: actions/setup-java@v5.2.0
143+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
144144
with:
145145
distribution: temurin
146146
java-version: 17
147147

148148
- name: Cache Gradle Wrapper
149-
uses: actions/cache@v5.0.4
149+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
150150
with:
151151
path: ~/.gradle/wrapper
152152
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
153153

154154
- name: Login to GitHub Container Registry
155-
uses: docker/login-action@v4.1.0
155+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
156156
with:
157157
registry: ghcr.io
158158
username: ${{ github.repository_owner }}
@@ -173,7 +173,7 @@ jobs:
173173
shellcheck:
174174
runs-on: ubuntu-24.04
175175
steps:
176-
- uses: actions/checkout@v6.0.2
176+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
177177

178178
- name: Install shell check
179179
run: wget -qO- "https://github.com/koalaman/shellcheck/releases/download/v0.8.0/shellcheck-v0.8.0.linux.x86_64.tar.xz" | tar -xJv

‎.github/workflows/cla.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
steps:
1818
- name: "CLA Assistant"
1919
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
20-
uses: contributor-assistant/github-action@v2.6.1
20+
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
2121
env:
2222
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2323
PERSONAL_ACCESS_TOKEN: ${{ secrets.PAT_CLATOOL }}

‎.github/workflows/gradle-wrapper-validation.yml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,5 @@ jobs:
1212
validation:
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/checkout@v6.0.2
16-
17-
- uses: gradle/actions/wrapper-validation@v6.0.1
15+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
16+
- uses: gradle/actions/wrapper-validation@39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f # v6.0.1

‎.github/workflows/nightly.yaml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,16 @@ jobs:
1414
build:
1515
runs-on: ubuntu-24.04
1616
steps:
17-
- uses: actions/checkout@v6.0.2
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818

1919
- name: Set up JDK 17 for running Gradle
20-
uses: actions/setup-java@v5.2.0
20+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
2121
with:
2222
distribution: temurin
2323
java-version: 17
2424

2525
- name: Cache Gradle Wrapper
26-
uses: actions/cache@v5.0.4
26+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
2727
with:
2828
path: ~/.gradle/wrapper
2929
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -38,16 +38,16 @@ jobs:
3838
test-latest-deps:
3939
runs-on: ubuntu-24.04
4040
steps:
41-
- uses: actions/checkout@v6.0.2
41+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4242

4343
- name: Set up JDK 17 for running Gradle
44-
uses: actions/setup-java@v5.2.0
44+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4545
with:
4646
distribution: temurin
4747
java-version: 17
4848

4949
- name: Cache Gradle Wrapper
50-
uses: actions/cache@v5.0.4
50+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
5151
with:
5252
path: ~/.gradle/wrapper
5353
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -65,16 +65,16 @@ jobs:
6565
matrix: ${{ steps.set-matrix.outputs.matrix }}
6666
steps:
6767
- name: Check out repository
68-
uses: actions/checkout@v6.0.2
68+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6969

7070
- name: Set up JDK 17 for running Gradle
71-
uses: actions/setup-java@v5.2.0
71+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
7272
with:
7373
distribution: temurin
7474
java-version: 17
7575

7676
- name: Cache Gradle Wrapper
77-
uses: actions/cache@v5.0.4
77+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
7878
with:
7979
path: ~/.gradle/wrapper
8080
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
@@ -90,23 +90,23 @@ jobs:
9090
fail-fast: false
9191
steps:
9292
- name: Check out repository
93-
uses: actions/checkout@v6.0.2
93+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9494

9595
- name: Set up JDK 17 for running Gradle
96-
uses: actions/setup-java@v5.2.0
96+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
9797
with:
9898
distribution: temurin
9999
java-version: 17
100100

101101
- name: Cache Gradle Wrapper
102-
uses: actions/cache@v5.0.4
102+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
103103
with:
104104
path: ~/.gradle/wrapper
105105
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
106106

107107
- name: Run muzzle
108108
# using retry because of sporadic gradle download failures
109-
uses: nick-invision/retry@v4.0.0
109+
uses: nick-invision/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
110110
with:
111111
# timing out has not been a problem, these jobs typically finish in 2-3 minutes
112112
timeout_minutes: 15
@@ -128,25 +128,25 @@ jobs:
128128
suite: profiler
129129
fail-fast: false
130130
steps:
131-
- uses: actions/checkout@v6.0.2
131+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
132132

133133
- name: Free disk space
134134
run: .github/scripts/gha-free-disk-space.sh
135135

136136
- name: Set up JDK 17 for running Gradle
137-
uses: actions/setup-java@v5.2.0
137+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
138138
with:
139139
distribution: temurin
140140
java-version: 17
141141

142142
- name: Cache Gradle Wrapper
143-
uses: actions/cache@v5.0.4
143+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
144144
with:
145145
path: ~/.gradle/wrapper
146146
key: ${{ runner.os }}-gradle-wrapper-cache-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
147147

148148
- name: Login to GitHub Container Registry
149-
uses: docker/login-action@v4.1.0
149+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
150150
with:
151151
registry: ghcr.io
152152
username: ${{ github.repository_owner }}
@@ -174,9 +174,9 @@ jobs:
174174
steps:
175175
# run this action to get workflow conclusion
176176
# You can get conclusion by env (env.WORKFLOW_CONCLUSION)
177-
- uses: technote-space/workflow-conclusion-action@v3.0.3
177+
- uses: technote-space/workflow-conclusion-action@45ce8e0eb155657ab8ccf346ade734257fd196a5 # v3.0.3
178178

179-
- uses: actions/checkout@v6.0.2
179+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180180

181181
- name: Create issue
182182
if: env.WORKFLOW_CONCLUSION == 'failure' # notify only if failure
@@ -199,7 +199,7 @@ jobs:
199199
shellcheck:
200200
runs-on: ubuntu-24.04
201201
steps:
202-
- uses: actions/checkout@v6.0.2
202+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
203203

204204
- name: Install shell check
205205
run: wget -qO- "https://github.com/koalaman/shellcheck/releases/download/v0.8.0/shellcheck-v0.8.0.linux.x86_64.tar.xz" | tar -xJv

0 commit comments

Comments
 (0)