From cfa5cfb621d044811402926125feb4cfd3f2e18a Mon Sep 17 00:00:00 2001 From: Sobhe higaze Date: Tue, 21 Jul 2026 15:33:04 +0300 Subject: [PATCH] pin GitHub Actions to commit SHA --- .github/workflows/bench-hyperfine.yml | 40 ++++++++++---------- .github/workflows/ci.yml | 54 +++++++++++++-------------- .github/workflows/publish.yml | 8 ++-- .github/workflows/release.yml | 18 ++++----- .github/workflows/rustdoc.yml | 10 ++--- .github/workflows/starknet-blocks.yml | 16 ++++---- 6 files changed, 73 insertions(+), 73 deletions(-) diff --git a/.github/workflows/bench-hyperfine.yml b/.github/workflows/bench-hyperfine.yml index 5cee142d97..a03447c70c 100644 --- a/.github/workflows/bench-hyperfine.yml +++ b/.github/workflows/bench-hyperfine.yml @@ -23,7 +23,7 @@ jobs: TABLEGEN_190_PREFIX: /usr/lib/llvm-19/ LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/ steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: check and free hdd space left @@ -45,12 +45,12 @@ jobs: sudo rm -rf /usr/share/dotnet/ sudo rm -rf /usr/local/lib/android df -h - - uses: dtolnay/rust-toolchain@1.84.1 + - uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 with: components: clippy - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -58,7 +58,7 @@ jobs: - name: Install LLVM run: sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools - name: Install hyperfine - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2 with: tool: hyperfine@1.18 - name: Install deps @@ -70,7 +70,7 @@ jobs: - name: Find Bench Comment continue-on-error: true - uses: peter-evans/find-comment@v3 + uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3 id: fc with: issue-number: ${{ github.event.pull_request.number }} @@ -78,7 +78,7 @@ jobs: body-includes: Benchmarking - name: Create or update bench comment continue-on-error: true - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 with: comment-id: ${{ steps.fc.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} @@ -117,9 +117,9 @@ jobs: sudo rm -rf /usr/local/lib/android df -h - name: Install Rust - uses: dtolnay/rust-toolchain@1.84.1 + uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -128,13 +128,13 @@ jobs: run: sudo apt-get update && sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools - name: Checkout base commit - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ github.event.pull_request[matrix.branch].sha }} submodules: true - name: Fetch Rust cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Build binary run: | @@ -143,7 +143,7 @@ jobs: cp target/release/cairo-native-run bin/cairo-native-run-${{ matrix.branch }} - name: Upload binary - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: binary-${{ matrix.branch }} path: bin/cairo-native-run-${{ matrix.branch }} @@ -162,18 +162,18 @@ jobs: needs: [ build-binaries ] steps: - name: Checkout base commit - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: ref: ${{ github.event.pull_request[matrix.branch].sha }} submodules: true - name: Install Hyperfine - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2 with: tool: hyperfine@1.16 - name: Download ${{ matrix.branch }} binary - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: binary-${{ matrix.branch }} path: bin @@ -196,7 +196,7 @@ jobs: done - name: Upload benches ${{matrix.branch}} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: results-${{matrix.branch}} path: bench-results-${{matrix.branch}} @@ -207,13 +207,13 @@ jobs: needs: [ run-bench ] steps: - name: Fetch Base Result - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: results-base path: bench-results-base - name: Fetch Head Result - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: results-head path: bench-results-head @@ -236,7 +236,7 @@ jobs: - name: Find Bench Comment continue-on-error: true - uses: peter-evans/find-comment@v3 + uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3 id: fc with: issue-number: ${{ github.event.pull_request.number }} @@ -245,7 +245,7 @@ jobs: - name: Create or update bench comment continue-on-error: true - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 with: comment-id: ${{ steps.fc.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4d9af8cebd..a9547148ca 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,15 +20,15 @@ jobs: LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/ TABLEGEN_190_PREFIX: /usr/lib/llvm-19/ steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - - uses: dtolnay/rust-toolchain@1.84.1 + - uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 with: components: clippy, rustfmt - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -44,15 +44,15 @@ jobs: name: rustfmt runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v4 - - uses: dtolnay/rust-toolchain@1.84.1 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 with: components: rustfmt - run: cargo fmt --all -- --check - name: Find Comment continue-on-error: true if: success() || failure() - uses: peter-evans/find-comment@v3 + uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3 id: fc with: issue-number: ${{ github.event.pull_request.number }} @@ -61,7 +61,7 @@ jobs: - name: Create or update comment continue-on-error: true if: failure() - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 with: comment-id: ${{ steps.fc.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} @@ -73,7 +73,7 @@ jobs: - name: Create or update comment continue-on-error: true if: ${{ success() && steps.fc.outputs.comment-id != null }} - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 with: comment-id: ${{ steps.fc.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} @@ -91,14 +91,14 @@ jobs: LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/ TABLEGEN_190_PREFIX: /usr/lib/llvm-19/ steps: - - uses: actions/checkout@v4 - - uses: dtolnay/rust-toolchain@master + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master with: toolchain: nightly components: rustfmt - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -106,7 +106,7 @@ jobs: - name: Install LLVM run: sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools - name: Machete - uses: bnjbvr/cargo-machete@main + uses: bnjbvr/cargo-machete@4eaa2674d88afbc32a065d868d906c7492129d45 # main test: name: test (linux, amd64) @@ -117,11 +117,11 @@ jobs: TABLEGEN_190_PREFIX: /usr/lib/llvm-19/ RUST_LOG: cairo_native=debug,cairo_native_test=debug steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: Install testing tools - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2 with: tool: cargo-nextest - name: check and free hdd space left @@ -144,11 +144,11 @@ jobs: sudo rm -rf /usr/local/lib/android df -h - name: Setup rust env - uses: dtolnay/rust-toolchain@1.84.1 + uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 - name: Retreive cached dependecies - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -174,20 +174,20 @@ jobs: TABLEGEN_190_PREFIX: /opt/homebrew/opt/llvm@19 RUST_LOG: cairo_native=debug,cairo_native_test=debug steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: Install testing tools - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@a6b2e2dcd845ddd7f509ce4f3ed3d922b80cc5d9 # v2 with: tool: cargo-nextest - name: Rustup toolchain install - uses: dtolnay/rust-toolchain@1.84.1 + uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 with: components: clippy - name: Rust `$PATH` workaround. run: echo "$HOME/.cargo/bin" >> $GITHUB_PATH - - uses: Homebrew/actions/setup-homebrew@master + - uses: Homebrew/actions/setup-homebrew@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # master - name: Install deps run: make deps - name: Run tests @@ -199,7 +199,7 @@ jobs: name: dockerfile (linux, amd64) runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: check and free hdd space left @@ -229,11 +229,11 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: Retreive cached dependecies - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Install dependencies run: | make deps @@ -254,9 +254,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Retreive cached dependecies - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Build working-directory: ./debug_utils/casm-data-flow run: cargo build --all-features --verbose diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b200789666..62a30ad365 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -19,18 +19,18 @@ jobs: CRATES_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: free HDD space run: | # deleting space sudo rm -rf /usr/share/dotnet/ sudo rm -rf /usr/local/lib/android - name: Setup rust env - uses: dtolnay/rust-toolchain@1.84.1 + uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 - name: Retreive cached dependecies - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 329644ad55..235561da44 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,8 +14,8 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@v4 - - uses: taiki-e/create-gh-release-action@v1 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: taiki-e/create-gh-release-action@eba8ea96c86cca8a37f1b56e94b4d13301fba651 # v1 with: token: ${{ secrets.GITHUB_TOKEN }} @@ -32,7 +32,7 @@ jobs: dep_base_dir: /opt/homebrew/opt/llvm@19 runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: submodules: true - name: Set env @@ -42,7 +42,7 @@ jobs: echo "TABLEGEN_190_PREFIX=${{ matrix.dep_base_dir }}" >> $GITHUB_ENV - name: Install deps run: make deps && make deps-ci-linux - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: cairo-native-compile manifest_path: binaries/cairo-native-compile/Cargo.toml @@ -51,7 +51,7 @@ jobs: zip: windows archive: cairo-native-compile-$target token: ${{ secrets.GITHUB_TOKEN }} - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: cairo-native-dump manifest_path: binaries/cairo-native-dump/Cargo.toml @@ -60,7 +60,7 @@ jobs: zip: windows archive: cairo-native-dump-$target token: ${{ secrets.GITHUB_TOKEN }} - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: cairo-native-run manifest_path: binaries/cairo-native-run/Cargo.toml @@ -69,7 +69,7 @@ jobs: zip: windows archive: cairo-native-run-$target token: ${{ secrets.GITHUB_TOKEN }} - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: cairo-native-stress manifest_path: debug_utils/cairo-native-stress/Cargo.toml @@ -78,7 +78,7 @@ jobs: zip: windows archive: cairo-native-stress-$target token: ${{ secrets.GITHUB_TOKEN }} - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: cairo-native-test manifest_path: binaries/cairo-native-test/Cargo.toml @@ -87,7 +87,7 @@ jobs: zip: windows archive: cairo-native-test-$target token: ${{ secrets.GITHUB_TOKEN }} - - uses: taiki-e/upload-rust-binary-action@v1 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1 with: bin: starknet-native-compile manifest_path: binaries/starknet-native-compile/Cargo.toml diff --git a/.github/workflows/rustdoc.yml b/.github/workflows/rustdoc.yml index bef3d3ebf6..62064ca846 100644 --- a/.github/workflows/rustdoc.yml +++ b/.github/workflows/rustdoc.yml @@ -17,11 +17,11 @@ jobs: LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/ TABLEGEN_190_PREFIX: /usr/lib/llvm-19/ steps: - - uses: actions/checkout@v4 - - uses: dtolnay/rust-toolchain@1.84.1 - - uses: Swatinem/rust-cache@v2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 + - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: add llvm deb repository - uses: myci-actions/add-deb-repo@11 + uses: myci-actions/add-deb-repo@43408b9f0225d1c64ba667d59e337c6140383bbe # 11 with: repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main repo-name: llvm-repo @@ -31,7 +31,7 @@ jobs: - name: Build docs run: make doc - name: Deploy Documentation - uses: peaceiris/actions-gh-pages@v4 + uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4 with: github_token: ${{ secrets.GITHUB_TOKEN }} publish_branch: gh-pages diff --git a/.github/workflows/starknet-blocks.yml b/.github/workflows/starknet-blocks.yml index 10ae046be2..c90102861f 100644 --- a/.github/workflows/starknet-blocks.yml +++ b/.github/workflows/starknet-blocks.yml @@ -25,7 +25,7 @@ jobs: steps: # We checkout replay as it's the main repository for this workflow - name: Checkout Replay - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: repository: starkware-libs/starknet-replay path: starknet-replay @@ -33,11 +33,11 @@ jobs: # We need native to use the linux deps ci action - name: Checkout Native - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: path: cairo_native - name: Checkout Sequencer - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 with: repository: starkware-libs/sequencer path: sequencer @@ -46,7 +46,7 @@ jobs: - name: Restore RPC Calls id: restore-rpc-calls - uses: actions/cache/restore@v4.2.0 + uses: actions/cache/restore@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 with: path: starknet-replay/cache key: cache-${{matrix.block}}-${{ github.run_id }} @@ -56,9 +56,9 @@ jobs: # Install dependencies - uses: ./cairo_native/.github/actions/install-linux-deps - name: Setup rust env - uses: dtolnay/rust-toolchain@1.84.1 + uses: dtolnay/rust-toolchain@1321684edfabb845e0bc37de117ff544adf0f648 # 1.84.1 - name: Retreive cached dependecies - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: workspaces: | starknet-replay @@ -100,13 +100,13 @@ jobs: cargo run --release --bin replay --features "state_dump,only_cairo_vm" block mainnet ${{ matrix.block }} - name: Upload dumps - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: dump-${{matrix.block}}-${{matrix.runner}} path: starknet-replay/state_dumps/${{matrix.runner}} - name: Save RPC Calls - uses: actions/cache/save@v4.2.0 + uses: actions/cache/save@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 if: ${{ always() && matrix.runner == 'vm' }} with: path: starknet-replay/cache