From e2e956598439d4f65886da0cbf7796a4711ed703 Mon Sep 17 00:00:00 2001 From: Thierry Moisan Date: Sat, 13 Jul 2024 10:50:43 -0400 Subject: [PATCH] workflows: pin actions --- .github/workflows/autogenerated-files.yml | 2 +- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/docker.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/pkg-installer.yml | 8 ++++---- .github/workflows/rubydoc.yml | 2 +- .../sponsors-maintainers-man-completions.yml | 2 +- .github/workflows/stale-issues.yml | 4 ++-- .github/workflows/tests.yml | 12 ++++++------ .github/workflows/vendor-gems.yml | 2 +- 10 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/autogenerated-files.yml b/.github/workflows/autogenerated-files.yml index f52a420f010dc..1689fdc7f41b1 100644 --- a/.github/workflows/autogenerated-files.yml +++ b/.github/workflows/autogenerated-files.yml @@ -30,7 +30,7 @@ jobs: test-bot: true - name: Cache Bundler RubyGems - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ${{ steps.set-up-homebrew.outputs.gems-path }} key: ${{ runner.os }}-rubygems-${{ steps.set-up-homebrew.outputs.gems-hash }} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 890e146e7289a..5265f6dfd2c3a 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -19,10 +19,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@319cdb9fa619417d07cc37a964f0502bfbc5e8a9 # v3 with: languages: ruby config: | @@ -30,4 +30,4 @@ jobs: - Library/Homebrew/vendor - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@319cdb9fa619417d07cc37a964f0502bfbc5e8a9 # v3 diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index f89bba5a9803a..fae55e6d5642c 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -25,7 +25,7 @@ jobs: version: ["18.04", "20.04", "22.04", "24.04"] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 69c7d6310f3df..0d6ac808e314c 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -30,7 +30,7 @@ jobs: test-bot: false - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Install vale run: brew install vale diff --git a/.github/workflows/pkg-installer.yml b/.github/workflows/pkg-installer.yml index 30ae5131c8004..5abe7152c9f9f 100644 --- a/.github/workflows/pkg-installer.yml +++ b/.github/workflows/pkg-installer.yml @@ -70,7 +70,7 @@ jobs: run: rm -f "${RUNNER_TEMP}/${TEMPORARY_CERTIFICATE_FILE}" - name: Checkout another Homebrew to brew subdirectory - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: path: brew fetch-depth: 0 @@ -120,7 +120,7 @@ jobs: fi - name: Upload installer to GitHub Actions - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4 with: name: Homebrew-${{ steps.homebrew-version.outputs.version }}.pkg path: Homebrew-${{ steps.homebrew-version.outputs.version }}.pkg @@ -142,7 +142,7 @@ jobs: name: macos-14-arm64 steps: - name: Download installer from GitHub Actions - uses: actions/download-artifact@v4 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 with: name: "${{ needs.build.outputs.installer_path }}" @@ -191,7 +191,7 @@ jobs: contents: write steps: - name: Download installer from GitHub Actions - uses: actions/download-artifact@v4 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 with: name: "${{ needs.build.outputs.installer_path }}" diff --git a/.github/workflows/rubydoc.yml b/.github/workflows/rubydoc.yml index ad31f303c3205..4287886ae2a63 100644 --- a/.github/workflows/rubydoc.yml +++ b/.github/workflows/rubydoc.yml @@ -32,7 +32,7 @@ jobs: test-bot: false - name: Checkout Homebrew/rubydoc.brew.sh - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: repository: Homebrew/rubydoc.brew.sh path: rubydoc diff --git a/.github/workflows/sponsors-maintainers-man-completions.yml b/.github/workflows/sponsors-maintainers-man-completions.yml index bb84d5f7a2ea7..32f13ae24ac6b 100644 --- a/.github/workflows/sponsors-maintainers-man-completions.yml +++ b/.github/workflows/sponsors-maintainers-man-completions.yml @@ -45,7 +45,7 @@ jobs: signing_key: ${{ secrets.BREWTESTBOT_GPG_SIGNING_SUBKEY }} - name: Cache Bundler RubyGems - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ${{ steps.set-up-homebrew.outputs.gems-path }} key: ${{ runner.os }}-rubygems-${{ steps.set-up-homebrew.outputs.gems-hash }} diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml index 5fd78c25c0400..312cab0448f24 100644 --- a/.github/workflows/stale-issues.yml +++ b/.github/workflows/stale-issues.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Mark/Close Stale Issues and Pull Requests - uses: actions/stale@v9 + uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9 with: repo-token: ${{ secrets.GITHUB_TOKEN }} days-before-stale: 21 @@ -57,7 +57,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Mark/Close Stale `bump-formula-pr` and `bump-cask-pr` Pull Requests - uses: actions/stale@v9 + uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9 with: repo-token: ${{ secrets.GITHUB_TOKEN }} days-before-stale: 2 diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index f49997fb91805..71b980497b392 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -35,7 +35,7 @@ jobs: test-bot: false - name: Cache Bundler RubyGems - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ${{ steps.set-up-homebrew.outputs.gems-path }} key: ${{ runner.os }}-rubygems-syntax-${{ steps.set-up-homebrew.outputs.gems-hash }} @@ -48,7 +48,7 @@ jobs: run: brew install shellcheck shfmt - name: Cache style cache - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.cache/Homebrew/style key: syntax-style-cache-${{ github.sha }} @@ -87,7 +87,7 @@ jobs: test-bot: true - name: Cache Bundler RubyGems - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ${{ steps.set-up-homebrew.outputs.gems-path }} key: ${{ runner.os }}-rubygems-tap-syntax-${{ steps.set-up-homebrew.outputs.gems-hash }} @@ -97,7 +97,7 @@ jobs: run: brew install-bundler-gems --groups=style - name: Cache style cache - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.cache/Homebrew/style key: tap-syntax-style-cache-${{ github.sha }} @@ -309,7 +309,7 @@ jobs: test-bot: false - name: Cache Bundler RubyGems - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ${{ steps.set-up-homebrew.outputs.gems-path }} key: ${{ matrix.runs-on }}-tests-rubygems-${{ steps.set-up-homebrew.outputs.gems-hash }} @@ -324,7 +324,7 @@ jobs: run: mkdir tests - name: Cache parallel tests log - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: tests key: ${{ runner.os }}-${{ matrix.test-flags }}-parallel_runtime_rspec-${{ github.sha }} diff --git a/.github/workflows/vendor-gems.yml b/.github/workflows/vendor-gems.yml index 6f74637495bc5..472704d576a45 100644 --- a/.github/workflows/vendor-gems.yml +++ b/.github/workflows/vendor-gems.yml @@ -98,7 +98,7 @@ jobs: fi - name: Generate push token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1 id: app-token if: github.event_name == 'pull_request_target' || github.event_name == 'workflow_dispatch' with: