Skip to content

Commit 83c7449

Browse files
alvicsamalvicsam
authored
ci: pin all actions version (#9776)
PR pins hash versions for all actions cc paritytech/devops#4319
1 parent fea33a9 commit 83c7449

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

46 files changed

+534
-534
lines changed

‎.github/actions/build-push-image/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ runs:
2323
# gcloud
2424
# https://github.com/paritytech/ci_cd/wiki/GitHub:-Push-Docker-image-to-GCP-Registry
2525
- name: "Set up Cloud SDK"
26-
uses: "google-github-actions/setup-gcloud@v2"
26+
uses: "google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f" # v2.2.1
2727
- name: "gcloud info"
2828
shell: bash
2929
run: "gcloud info"
@@ -53,7 +53,7 @@ runs:
5353
id: login
5454
# fork check
5555
if: ${{ inputs.username != '' && inputs.password != '' && github.event_name != 'merge_group' }}
56-
uses: docker/login-action@v3
56+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
5757
with:
5858
username: ${{ inputs.username }}
5959
password: ${{ inputs.password }}

‎.github/actions/download-artifact-extract/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ inputs:
2929
runs:
3030
using: "composite"
3131
steps:
32-
- uses: actions/[email protected]
32+
- uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
3333
with:
3434
name: ${{ inputs.artifact-name }}
3535
github-token: ${{ inputs.gh-token }}

‎.github/actions/workflow-stopper/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ runs:
1111
using: "composite"
1212
steps:
1313
- name: Worfklow stopper - Generate token
14-
uses: actions/create-github-app-token@v1
14+
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
1515
id: app-token
1616
with:
1717
app-id: ${{ inputs.app-id }}

‎.github/actions/zombienet-sdk/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ runs:
108108
109109
110110
- name: upload_logs
111-
uses: actions/upload-artifact@v4
111+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
112112
if: ${{ ! cancelled() }}
113113
with:
114114
name: zombienet-logs-${{ inputs.job-name }}-${{ github.sha }}

‎.github/actions/zombienet/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ runs:
103103
fi
104104
105105
- name: upload_logs
106-
uses: actions/upload-artifact@v4
106+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
107107
if: ${{ ! cancelled() }}
108108
with:
109109
name: zombienet-logs-${{ inputs.job-name }}-${{ github.sha }}

‎.github/workflows/bench-all-runtimes.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
image: ${{ needs.preflight.outputs.IMAGE }}
3333
name: Extract runtimes from matrix
3434
steps:
35-
- uses: actions/checkout@v4
35+
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
3636
with:
3737
ref: master
3838

@@ -79,7 +79,7 @@ jobs:
7979
steps:
8080

8181
- name: Checkout
82-
uses: actions/checkout@v4
82+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
8383
with:
8484
fetch-depth: 0
8585
ref: ${{ needs.runtime-matrix.outputs.branch }} # checkout always from the initially created branch to avoid conflicts
@@ -112,7 +112,7 @@ jobs:
112112
git reset
113113
114114
- name: Upload diff
115-
uses: actions/upload-artifact@v4
115+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
116116
with:
117117
name: diff-${{ matrix.runtime.name }}
118118
path: diff-${{ matrix.runtime.name }}.patch
@@ -122,18 +122,18 @@ jobs:
122122
needs: [runtime-matrix, run-frame-omni-bencher]
123123
steps:
124124
- name: Checkout
125-
uses: actions/checkout@v4
125+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
126126
with:
127127
fetch-depth: 0
128128
ref: ${{ needs.runtime-matrix.outputs.branch }}
129129

130130
- name: Download all artifacts
131-
uses: actions/download-artifact@v4
131+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
132132
with:
133133
path: patches
134134

135135
# needs to be able to trigger CI
136-
- uses: actions/create-github-app-token@v2
136+
- uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
137137
id: generate_token
138138
with:
139139
app-id: ${{ secrets.CMD_BOT_APP_ID }}

‎.github/workflows/benchmarks-networking.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
]
3333
steps:
3434
- name: Checkout
35-
uses: actions/checkout@v4
35+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
3636

3737
- name: Run Benchmarks
3838
id: run-benchmarks
@@ -42,7 +42,7 @@ jobs:
4242
ls -lsa ./charts
4343
4444
- name: Upload artifacts
45-
uses: actions/[email protected]
45+
uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
4646
with:
4747
name: ${{ matrix.features.bench }}-${{ github.sha }}
4848
path: ./charts
@@ -55,21 +55,21 @@ jobs:
5555
runs-on: ubuntu-latest
5656
steps:
5757
- name: Checkout
58-
uses: actions/checkout@v4
58+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5959
with:
6060
ref: gh-pages
6161
fetch-depth: 0
6262

6363
- run: git checkout master --
6464

6565
- name: Download artifacts
66-
uses: actions/[email protected]
66+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
6767
with:
6868
name: notifications_protocol-${{ github.sha }}
6969
path: ./charts
7070

7171
- name: Download artifacts
72-
uses: actions/[email protected]
72+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
7373
with:
7474
name: request_response_protocol-${{ github.sha }}
7575
path: ./charts
@@ -80,7 +80,7 @@ jobs:
8080
git config --global --add safe.directory '*'
8181
ls -lsR ./charts
8282
83-
- uses: actions/create-github-app-token@v2
83+
- uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
8484
id: app-token
8585
with:
8686
app-id: ${{ secrets.POLKADOTSDK_GHPAGES_APP_ID }}
@@ -89,7 +89,7 @@ jobs:
8989
- name: Generate ${{ env.BENCH }}
9090
env:
9191
BENCH: notifications_protocol
92-
uses: benchmark-action/github-action-benchmark@v1
92+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
9393
with:
9494
tool: "cargo"
9595
name: ${{ env.BENCH }}
@@ -101,7 +101,7 @@ jobs:
101101
- name: Generate ${{ env.BENCH }}
102102
env:
103103
BENCH: request_response_protocol
104-
uses: benchmark-action/github-action-benchmark@v1
104+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
105105
with:
106106
tool: "cargo"
107107
name: ${{ env.BENCH }}

‎.github/workflows/benchmarks-subsystem.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
]
5656
steps:
5757
- name: Checkout
58-
uses: actions/checkout@v4
58+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5959

6060
- name: Check Rust
6161
run: |
@@ -69,7 +69,7 @@ jobs:
6969
ls -lsa ./charts
7070
7171
- name: Upload artifacts
72-
uses: actions/[email protected]
72+
uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
7373
with:
7474
name: ${{matrix.features.bench}}
7575
path: ./charts
@@ -82,15 +82,15 @@ jobs:
8282
runs-on: ubuntu-latest
8383
steps:
8484
- name: Checkout
85-
uses: actions/checkout@v4
85+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
8686
with:
8787
ref: gh-pages
8888
fetch-depth: 0
8989

9090
- run: git checkout master --
9191

9292
- name: Download artifacts
93-
uses: actions/[email protected]
93+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
9494
with:
9595
path: ./charts
9696

@@ -100,7 +100,7 @@ jobs:
100100
git config --global --add safe.directory '*'
101101
ls -lsR ./charts
102102
103-
- uses: actions/create-github-app-token@v2
103+
- uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
104104
id: app-token
105105
with:
106106
app-id: ${{ secrets.POLKADOTSDK_GHPAGES_APP_ID }}
@@ -109,7 +109,7 @@ jobs:
109109
- name: Generate ${{ env.BENCH }}
110110
env:
111111
BENCH: availability-recovery-regression-bench
112-
uses: benchmark-action/github-action-benchmark@v1
112+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
113113
with:
114114
tool: "customSmallerIsBetter"
115115
name: ${{ env.BENCH }}
@@ -122,7 +122,7 @@ jobs:
122122
- name: Generate ${{ env.BENCH }}
123123
env:
124124
BENCH: availability-distribution-regression-bench
125-
uses: benchmark-action/github-action-benchmark@v1
125+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
126126
with:
127127
tool: "customSmallerIsBetter"
128128
name: ${{ env.BENCH }}
@@ -135,7 +135,7 @@ jobs:
135135
- name: Generate ${{ env.BENCH }}
136136
env:
137137
BENCH: approval-voting-regression-bench
138-
uses: benchmark-action/github-action-benchmark@v1
138+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
139139
with:
140140
tool: "customSmallerIsBetter"
141141
name: ${{ env.BENCH }}
@@ -148,7 +148,7 @@ jobs:
148148
- name: Generate ${{ env.BENCH }}
149149
env:
150150
BENCH: statement-distribution-regression-bench
151-
uses: benchmark-action/github-action-benchmark@v1
151+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
152152
with:
153153
tool: "customSmallerIsBetter"
154154
name: ${{ env.BENCH }}
@@ -161,7 +161,7 @@ jobs:
161161
- name: Generate ${{ env.BENCH }}
162162
env:
163163
BENCH: dispute-coordinator-regression-bench
164-
uses: benchmark-action/github-action-benchmark@v1
164+
uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
165165
with:
166166
tool: "customSmallerIsBetter"
167167
name: ${{ env.BENCH }}

‎.github/workflows/build-misc.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
image: ${{ needs.preflight.outputs.IMAGE }}
3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@v4
33+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
3434

3535
- name: Check Rust
3636
run: |
@@ -60,7 +60,7 @@ jobs:
6060
image: ${{ needs.preflight.outputs.IMAGE }}
6161
steps:
6262
- name: Checkout
63-
uses: actions/checkout@v4
63+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
6464

6565
- name: Check Rust
6666
run: |
@@ -85,7 +85,7 @@ jobs:
8585
image: ${{ needs.preflight.outputs.IMAGE }}
8686
steps:
8787
- name: Checkout
88-
uses: actions/checkout@v4
88+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
8989

9090
- name: Check Rust
9191
run: |

‎.github/workflows/build-publish-eth-rpc.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,10 +44,10 @@ jobs:
4444
VERSION: ${{ needs.set-variables.outputs.VERSION }}
4545
steps:
4646
- name: Check out the repo
47-
uses: actions/checkout@v4
47+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
4848

4949
- name: Build eth-rpc Docker image
50-
uses: docker/build-push-action@v6
50+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
5151
with:
5252
context: .
5353
file: ./substrate/frame/revive/rpc/dockerfiles/eth-rpc/Dockerfile
@@ -64,16 +64,16 @@ jobs:
6464
VERSION: ${{ needs.set-variables.outputs.VERSION }}
6565
steps:
6666
- name: Check out the repo
67-
uses: actions/checkout@v4
67+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
6868

6969
- name: Log in to Docker Hub
70-
uses: docker/login-action@v3
70+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
7171
with:
7272
username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
7373
password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}
7474

7575
- name: Build eth-rpc Docker image
76-
uses: docker/build-push-action@v6
76+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
7777
with:
7878
context: .
7979
file: ./substrate/frame/revive/rpc/dockerfiles/eth-rpc/Dockerfile

0 commit comments

Comments
 (0)