Skip to content

Commit 5dd367b

Browse files
sobhe-Starkwaresobhe-Starkware
authored
pin GitHub Actions to commit SHA (#1651)
1 parent 931a25d commit 5dd367b

6 files changed

Lines changed: 73 additions & 73 deletions

File tree

‎.github/workflows/bench-hyperfine.yml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
2424
LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/
2525
steps:
26-
- uses: actions/checkout@v4
26+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
2727
with:
2828
submodules: true
2929
- name: check and free hdd space left
@@ -45,20 +45,20 @@ jobs:
4545
sudo rm -rf /usr/share/dotnet/
4646
sudo rm -rf /usr/local/lib/android
4747
df -h
48-
- uses: dtolnay/rust-toolchain@1.84.1
48+
- uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
4949
with:
5050
components: clippy
51-
- uses: Swatinem/rust-cache@v2
51+
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
5252
- name: add llvm deb repository
53-
uses: myci-actions/add-deb-repo@11
53+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
5454
with:
5555
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
5656
repo-name: llvm-repo
5757
keys-asc: https://apt.llvm.org/llvm-snapshot.gpg.key
5858
- name: Install LLVM
5959
run: sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools
6060
- name: Install hyperfine
61-
uses: taiki-e/install-action@v2
61+
uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2
6262
with:
6363
tool: hyperfine@1.18
6464
- name: Install deps
@@ -70,15 +70,15 @@ jobs:
7070

7171
- name: Find Bench Comment
7272
continue-on-error: true
73-
uses: peter-evans/find-comment@v3
73+
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
7474
id: fc
7575
with:
7676
issue-number: ${{ github.event.pull_request.number }}
7777
comment-author: "github-actions[bot]"
7878
body-includes: Benchmarking
7979
- name: Create or update bench comment
8080
continue-on-error: true
81-
uses: peter-evans/create-or-update-comment@v4
81+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
8282
with:
8383
comment-id: ${{ steps.fc.outputs.comment-id }}
8484
issue-number: ${{ github.event.pull_request.number }}
@@ -117,9 +117,9 @@ jobs:
117117
sudo rm -rf /usr/local/lib/android
118118
df -h
119119
- name: Install Rust
120-
uses: dtolnay/rust-toolchain@1.84.1
120+
uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
121121
- name: add llvm deb repository
122-
uses: myci-actions/add-deb-repo@11
122+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
123123
with:
124124
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
125125
repo-name: llvm-repo
@@ -128,13 +128,13 @@ jobs:
128128
run: sudo apt-get update && sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools
129129

130130
- name: Checkout base commit
131-
uses: actions/checkout@v4
131+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
132132
with:
133133
ref: ${{ github.event.pull_request[matrix.branch].sha }}
134134
submodules: true
135135

136136
- name: Fetch Rust cache
137-
uses: Swatinem/rust-cache@v2
137+
uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
138138

139139
- name: Build binary
140140
run: |
@@ -143,7 +143,7 @@ jobs:
143143
cp target/release/cairo-native-run bin/cairo-native-run-${{ matrix.branch }}
144144
145145
- name: Upload binary
146-
uses: actions/upload-artifact@v4
146+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
147147
with:
148148
name: binary-${{ matrix.branch }}
149149
path: bin/cairo-native-run-${{ matrix.branch }}
@@ -162,18 +162,18 @@ jobs:
162162
needs: [ build-binaries ]
163163
steps:
164164
- name: Checkout base commit
165-
uses: actions/checkout@v4
165+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
166166
with:
167167
ref: ${{ github.event.pull_request[matrix.branch].sha }}
168168
submodules: true
169169

170170
- name: Install Hyperfine
171-
uses: taiki-e/install-action@v2
171+
uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2
172172
with:
173173
tool: hyperfine@1.16
174174

175175
- name: Download ${{ matrix.branch }} binary
176-
uses: actions/download-artifact@v4
176+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
177177
with:
178178
name: binary-${{ matrix.branch }}
179179
path: bin
@@ -196,7 +196,7 @@ jobs:
196196
done
197197
198198
- name: Upload benches ${{matrix.branch}}
199-
uses: actions/upload-artifact@v4
199+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
200200
with:
201201
name: results-${{matrix.branch}}
202202
path: bench-results-${{matrix.branch}}
@@ -207,13 +207,13 @@ jobs:
207207
needs: [ run-bench ]
208208
steps:
209209
- name: Fetch Base Result
210-
uses: actions/download-artifact@v4
210+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
211211
with:
212212
name: results-base
213213
path: bench-results-base
214214

215215
- name: Fetch Head Result
216-
uses: actions/download-artifact@v4
216+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
217217
with:
218218
name: results-head
219219
path: bench-results-head
@@ -236,7 +236,7 @@ jobs:
236236
237237
- name: Find Bench Comment
238238
continue-on-error: true
239-
uses: peter-evans/find-comment@v3
239+
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
240240
id: fc
241241
with:
242242
issue-number: ${{ github.event.pull_request.number }}
@@ -245,7 +245,7 @@ jobs:
245245

246246
- name: Create or update bench comment
247247
continue-on-error: true
248-
uses: peter-evans/create-or-update-comment@v4
248+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
249249
with:
250250
comment-id: ${{ steps.fc.outputs.comment-id }}
251251
issue-number: ${{ github.event.pull_request.number }}

‎.github/workflows/ci.yml‎

Lines changed: 27 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -20,15 +20,15 @@ jobs:
2020
LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/
2121
TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
2222
steps:
23-
- uses: actions/checkout@v4
23+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
2424
with:
2525
submodules: true
26-
- uses: dtolnay/rust-toolchain@1.84.1
26+
- uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
2727
with:
2828
components: clippy, rustfmt
29-
- uses: Swatinem/rust-cache@v2
29+
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
3030
- name: add llvm deb repository
31-
uses: myci-actions/add-deb-repo@11
31+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
3232
with:
3333
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
3434
repo-name: llvm-repo
@@ -44,15 +44,15 @@ jobs:
4444
name: rustfmt
4545
runs-on: ubuntu-24.04
4646
steps:
47-
- uses: actions/checkout@v4
48-
- uses: dtolnay/rust-toolchain@1.84.1
47+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
48+
- uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
4949
with:
5050
components: rustfmt
5151
- run: cargo fmt --all -- --check
5252
- name: Find Comment
5353
continue-on-error: true
5454
if: success() || failure()
55-
uses: peter-evans/find-comment@v3
55+
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
5656
id: fc
5757
with:
5858
issue-number: ${{ github.event.pull_request.number }}
@@ -61,7 +61,7 @@ jobs:
6161
- name: Create or update comment
6262
continue-on-error: true
6363
if: failure()
64-
uses: peter-evans/create-or-update-comment@v4
64+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
6565
with:
6666
comment-id: ${{ steps.fc.outputs.comment-id }}
6767
issue-number: ${{ github.event.pull_request.number }}
@@ -73,7 +73,7 @@ jobs:
7373
- name: Create or update comment
7474
continue-on-error: true
7575
if: ${{ success() && steps.fc.outputs.comment-id != null }}
76-
uses: peter-evans/create-or-update-comment@v4
76+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
7777
with:
7878
comment-id: ${{ steps.fc.outputs.comment-id }}
7979
issue-number: ${{ github.event.pull_request.number }}
@@ -91,22 +91,22 @@ jobs:
9191
LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/
9292
TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
9393
steps:
94-
- uses: actions/checkout@v4
95-
- uses: dtolnay/rust-toolchain@master
94+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
95+
- uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master
9696
with:
9797
toolchain: nightly
9898
components: rustfmt
9999

100100
- name: add llvm deb repository
101-
uses: myci-actions/add-deb-repo@11
101+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
102102
with:
103103
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
104104
repo-name: llvm-repo
105105
keys-asc: https://apt.llvm.org/llvm-snapshot.gpg.key
106106
- name: Install LLVM
107107
run: sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools
108108
- name: Machete
109-
uses: bnjbvr/cargo-machete@main
109+
uses: bnjbvr/cargo-machete@4eaa2674d88afbc32a065d868d906c7492129d45 # main
110110

111111
test:
112112
name: test (linux, amd64)
@@ -117,11 +117,11 @@ jobs:
117117
TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
118118
RUST_LOG: cairo_native=debug,cairo_native_test=debug
119119
steps:
120-
- uses: actions/checkout@v4
120+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
121121
with:
122122
submodules: true
123123
- name: Install testing tools
124-
uses: taiki-e/install-action@v2
124+
uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2
125125
with:
126126
tool: cargo-nextest
127127
- name: check and free hdd space left
@@ -144,11 +144,11 @@ jobs:
144144
sudo rm -rf /usr/local/lib/android
145145
df -h
146146
- name: Setup rust env
147-
uses: dtolnay/rust-toolchain@1.84.1
147+
uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
148148
- name: Retreive cached dependecies
149-
uses: Swatinem/rust-cache@v2
149+
uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
150150
- name: add llvm deb repository
151-
uses: myci-actions/add-deb-repo@11
151+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
152152
with:
153153
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
154154
repo-name: llvm-repo
@@ -174,20 +174,20 @@ jobs:
174174
TABLEGEN_190_PREFIX: /opt/homebrew/opt/llvm@19
175175
RUST_LOG: cairo_native=debug,cairo_native_test=debug
176176
steps:
177-
- uses: actions/checkout@v4
177+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
178178
with:
179179
submodules: true
180180
- name: Install testing tools
181-
uses: taiki-e/install-action@v2
181+
uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2
182182
with:
183183
tool: cargo-nextest
184184
- name: Rustup toolchain install
185-
uses: dtolnay/rust-toolchain@1.84.1
185+
uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
186186
with:
187187
components: clippy
188188
- name: Rust `$PATH` workaround.
189189
run: echo "$HOME/.cargo/bin" >> $GITHUB_PATH
190-
- uses: Homebrew/actions/setup-homebrew@master
190+
- uses: Homebrew/actions/setup-homebrew@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # master
191191
- name: Install deps
192192
run: make deps
193193
- name: Run tests
@@ -199,7 +199,7 @@ jobs:
199199
name: dockerfile (linux, amd64)
200200
runs-on: ubuntu-24.04
201201
steps:
202-
- uses: actions/checkout@v4
202+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
203203
with:
204204
submodules: true
205205
- name: check and free hdd space left
@@ -229,11 +229,11 @@ jobs:
229229
runs-on: ubuntu-latest
230230

231231
steps:
232-
- uses: actions/checkout@v4
232+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
233233
with:
234234
submodules: true
235235
- name: Retreive cached dependecies
236-
uses: Swatinem/rust-cache@v2
236+
uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
237237
- name: Install dependencies
238238
run: |
239239
make deps
@@ -254,9 +254,9 @@ jobs:
254254
runs-on: ubuntu-latest
255255

256256
steps:
257-
- uses: actions/checkout@v4
257+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
258258
- name: Retreive cached dependecies
259-
uses: Swatinem/rust-cache@v2
259+
uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
260260
- name: Build
261261
working-directory: ./debug_utils/casm-data-flow
262262
run: cargo build --all-features --verbose

‎.github/workflows/publish.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,18 +19,18 @@ jobs:
1919
CRATES_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
2020
steps:
2121
- name: Checkout
22-
uses: actions/checkout@v4
22+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
2323
- name: free HDD space
2424
run: |
2525
# deleting space
2626
sudo rm -rf /usr/share/dotnet/
2727
sudo rm -rf /usr/local/lib/android
2828
- name: Setup rust env
29-
uses: dtolnay/rust-toolchain@1.84.1
29+
uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1
3030
- name: Retreive cached dependecies
31-
uses: Swatinem/rust-cache@v2
31+
uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
3232
- name: add llvm deb repository
33-
uses: myci-actions/add-deb-repo@11
33+
uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11
3434
with:
3535
repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
3636
repo-name: llvm-repo

0 commit comments

Comments
 (0)