FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

tools: pin actions by hash for auto-start-ci.yml · nodejs/node@2499677 · GitHub

/ node Public

Commit 2499677

Browse files
gabibguti
authored and
RafaelGSS
committed
tools: pin actions by hash for auto-start-ci.yml
Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> PR-URL: #46820 Reviewed-By: Yongsheng Zhang <zyszys98@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
1 parent 98f64ee commit 2499677

23 files changed

Lines changed: 66 additions & 66 deletions

‎.github/workflows/auto-start-ci.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,12 +46,12 @@ jobs:
4646
if: needs.get-prs-for-ci.outputs.numbers != ''
4747
runs-on: ubuntu-latest
4848
steps:
49-
- uses: actions/checkout@v3
49+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
5050
with:
5151
persist-credentials: false
5252

5353
- name: Install Node.js
54-
uses: actions/setup-node@v3
54+
uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
5555
with:
5656
node-version: ${{ env.NODE_VERSION }}
5757

‎.github/workflows/build-tarball.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -39,11 +39,11 @@ jobs:
3939
if: github.event.pull_request.draft == false
4040
runs-on: ubuntu-latest
4141
steps:
42-
- uses: actions/checkout@v3
42+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
4343
with:
4444
persist-credentials: false
4545
- name: Set up Python ${{ env.PYTHON_VERSION }}
46-
uses: actions/setup-python@v4
46+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
4747
with:
4848
python-version: ${{ env.PYTHON_VERSION }}
4949
- name: Environment Information
@@ -57,25 +57,25 @@ jobs:
5757
mkdir tarballs
5858
mv *.tar.gz tarballs
5959
- name: Upload tarball artifact
60-
uses: actions/upload-artifact@v3
60+
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
6161
with:
6262
name: tarballs
6363
path: tarballs
6464
test-tarball-linux:
6565
needs: build-tarball
6666
runs-on: ubuntu-latest
6767
steps:
68-
- uses: actions/checkout@v3
68+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
6969
with:
7070
persist-credentials: false
7171
- name: Set up Python ${{ env.PYTHON_VERSION }}
72-
uses: actions/setup-python@v4
72+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
7373
with:
7474
python-version: ${{ env.PYTHON_VERSION }}
7575
- name: Environment Information
7676
run: npx envinfo
7777
- name: Download tarball
78-
uses: actions/download-artifact@v3
78+
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
7979
with:
8080
name: tarballs
8181
path: tarballs

‎.github/workflows/build-windows.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,11 @@ jobs:
3838
fail-fast: false
3939
runs-on: ${{ matrix.windows }}
4040
steps:
41-
- uses: actions/checkout@v3
41+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
4242
with:
4343
persist-credentials: false
4444
- name: Set up Python ${{ env.PYTHON_VERSION }}
45-
uses: actions/setup-python@v4
45+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
4646
with:
4747
python-version: ${{ env.PYTHON_VERSION }}
4848
- name: Install deps

‎.github/workflows/close-stale-feature-requests.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
if: github.repository == 'nodejs/node'
4040
runs-on: ubuntu-latest
4141
steps:
42-
- uses: actions/stale@v7
42+
- uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7.0.0
4343
with:
4444
repo-token: ${{ secrets.GITHUB_TOKEN }}
4545
days-before-stale: 180

‎.github/workflows/close-stalled.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
if: github.repository == 'nodejs/node'
2121
runs-on: ubuntu-latest
2222
steps:
23-
- uses: actions/stale@v7
23+
- uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7.0.0
2424
with:
2525
repo-token: ${{ secrets.GITHUB_TOKEN }}
2626
days-before-close: 30

‎.github/workflows/commit-lint.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ jobs:
1717
run: |
1818
echo "plusOne=$((${{ github.event.pull_request.commits }} + 1))" >> $GITHUB_OUTPUT
1919
echo "minusOne=$((${{ github.event.pull_request.commits }} - 1))" >> $GITHUB_OUTPUT
20-
- uses: actions/checkout@v3
20+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
2121
with:
2222
fetch-depth: ${{ steps.nb-of-commits.outputs.plusOne }}
2323
persist-credentials: false
2424
- run: git reset HEAD^2
2525
- name: Install Node.js
26-
uses: actions/setup-node@v3
26+
uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
2727
with:
2828
node-version: ${{ env.NODE_VERSION }}
2929
- name: Validate commit message

‎.github/workflows/commit-queue.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
if: needs.get_mergeable_prs.outputs.numbers != ''
5959
runs-on: ubuntu-latest
6060
steps:
61-
- uses: actions/checkout@v3
61+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
6262
with:
6363
# Needs the whole git history for ncu to work
6464
# See https://github.com/nodejs/node-core-utils/pull/486
@@ -71,7 +71,7 @@ jobs:
7171

7272
# Install dependencies
7373
- name: Install Node.js
74-
uses: actions/setup-node@v3
74+
uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
7575
with:
7676
node-version: ${{ env.NODE_VERSION }}
7777
- name: Install node-core-utils

‎.github/workflows/coverage-linux-without-intl.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -37,11 +37,11 @@ jobs:
3737
if: github.event.pull_request.draft == false
3838
runs-on: ubuntu-latest
3939
steps:
40-
- uses: actions/checkout@v3
40+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
4141
with:
4242
persist-credentials: false
4343
- name: Set up Python ${{ env.PYTHON_VERSION }}
44-
uses: actions/setup-python@v4
44+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
4545
with:
4646
python-version: ${{ env.PYTHON_VERSION }}
4747
- name: Environment Information
@@ -64,6 +64,6 @@ jobs:
6464
- name: Clean tmp
6565
run: rm -rf coverage/tmp && rm -rf out
6666
- name: Upload
67-
uses: codecov/codecov-action@v3
67+
uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 # v3.1.1
6868
with:
6969
directory: ./coverage

‎.github/workflows/coverage-windows.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,11 +39,11 @@ jobs:
3939
if: github.event.pull_request.draft == false
4040
runs-on: windows-2022
4141
steps:
42-
- uses: actions/checkout@v3
42+
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
4343
with:
4444
persist-credentials: false
4545
- name: Set up Python ${{ env.PYTHON_VERSION }}
46-
uses: actions/setup-python@v4
46+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
4747
with:
4848
python-version: ${{ env.PYTHON_VERSION }}
4949
- name: Install deps
@@ -65,6 +65,6 @@ jobs:
6565
- name: Clean tmp
6666
run: npx rimraf ./coverage/tmp
6767
- name: Upload
68-
uses: codecov/codecov-action@v3
68+
uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 # v3.1.1
6969
with:
7070
directory: ./coverage

‎.github/workflows/daily-wpt-fyi.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Set up Python ${{ env.PYTHON_VERSION }}
36-
uses: actions/setup-python@v4
36+
uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
3737
with:
3838
python-version: ${{ env.PYTHON_VERSION }}
3939
- name: Environment Information
@@ -45,7 +45,7 @@ jobs:
4545
run: echo "NIGHTLY=$(curl -s https://nodejs.org/download/nightly/index.json | jq -r '[.[] | select(.files[] | contains("linux-x64"))][0].version')" >> $GITHUB_ENV
4646
- name: Install Node.js
4747
id: setup-node
48-
uses: actions/setup-node@v3
48+
uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
4949
with:
5050
node-version: ${{ env.NIGHTLY || matrix.node-version }}
5151
check-latest: true
@@ -57,7 +57,7 @@ jobs:
5757
SHORT_SHA=$(node -p 'process.version.split(/-nightly\d{8}/)[1]')
5858
echo "NIGHTLY_REF=$(gh api /repos/nodejs/node/commits/$SHORT_SHA --jq '.sha')" >> $GITHUB_ENV
5959
- name: Checkout ${{ steps.setup-node.outputs.node-version }}
60-
uses: actions/checkout@v3
60+
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
6161
with:
6262
persist-credentials: false
6363
ref: ${{ env.NIGHTLY_REF || steps.setup-node.outputs.node-version }}
@@ -73,7 +73,7 @@ jobs:
7373
run: rm -rf wpt
7474
working-directory: test/fixtures
7575
- name: Checkout epochs/daily WPT
76-
uses: actions/checkout@v3
76+
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
7777
with:
7878
repository: web-platform-tests/wpt
7979
persist-credentials: false
@@ -121,7 +121,7 @@ jobs:
121121
run: cp wptreport.json wptreport-${{ steps.setup-node.outputs.node-version }}.json
122122
- name: Upload GitHub Actions artifact
123123
if: ${{ env.WPT_REPORT != '' }}
124-
uses: actions/upload-artifact@v3
124+
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
125125
with:
126126
path: out/wpt/wptreport-*.json
127127
name: WPT Reports

0 commit comments

Comments
 (0)
Back | FazBrowse Home | New Git URL