From c97526f94ba65c6cee6229d629651900d74a3802 Mon Sep 17 00:00:00 2001 From: estebany-qd Date: Wed, 25 Mar 2026 11:08:39 -0500 Subject: [PATCH] ci: Pin all gh actions to commit SHAs --- .github/workflows/lint.yml | 6 +++--- .github/workflows/publish.yml | 4 ++-- .github/workflows/test.yml | 6 +++--- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 0db4706f..94df171a 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -9,12 +9,12 @@ jobs: steps: - name: Install minimal stable - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable with: components: rustfmt, clippy - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - name: Install Protoc - uses: arduino/setup-protoc@v3 + uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} - name: Check code formatting diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 65680f14..99291a3c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -17,8 +17,8 @@ jobs: steps: - name: Install minimal stable - uses: dtolnay/rust-toolchain@stable - - uses: actions/checkout@v3 + uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - name: Install dependencies run: sudo apt-get install protobuf-compiler - name: Login diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index d13c7252..17aba7b2 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -7,10 +7,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Install minimal stable - uses: dtolnay/rust-toolchain@stable - - uses: actions/checkout@v4 + uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Install Protoc - uses: arduino/setup-protoc@v3 + uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} - name: Run integration tests