Skip to content

Commit 01794b7

Browse files
hynekhynek
committed
ci: pin all actions
1 parent addf622 commit 01794b7

File tree

6 files changed

+42
-52
lines changed

6 files changed

+42
-52
lines changed

‎.github/workflows/build-docset.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ jobs:
1616
docset:
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/checkout@v5
19+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2020
with:
2121
fetch-depth: 0 # get correct version
2222
persist-credentials: false
23-
- uses: actions/setup-python@v5
23+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
2424
with:
2525
python-version: "3.12"
2626

@@ -29,7 +29,7 @@ jobs:
2929
- run: tox run -e docset
3030
- run: tar --exclude='.DS_Store' -cvzf structlog.tgz structlog.docset
3131

32-
- uses: actions/upload-artifact@v4
32+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
3333
with:
3434
name: docset
3535
path: structlog.tgz

‎.github/workflows/ci.yml‎

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121
runs-on: ubuntu-latest
2222

2323
steps:
24-
- uses: actions/checkout@v5
24+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2525
with:
2626
fetch-depth: 0
2727
persist-credentials: false
2828

29-
- uses: hynek/build-and-inspect-python-package@v2
29+
- uses: hynek/build-and-inspect-python-package@c52c3a4710070b50470d903818a7b25115dcd076 # v2.13.0
3030
id: baipp
3131

3232
outputs:
@@ -51,18 +51,18 @@ jobs:
5151

5252
steps:
5353
- name: Download pre-built packages
54-
uses: actions/download-artifact@v5
54+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
5555
with:
5656
name: Packages
5757
path: dist
5858
- run: |
5959
tar xf dist/*.tar.gz --strip-components=1
6060
rm -rf src
61-
- uses: actions/setup-python@v5
61+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
6262
with:
6363
python-version: ${{ matrix.python-version }}
6464
allow-prereleases: true
65-
- uses: hynek/setup-cached-uv@v2
65+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
6666

6767
- name: Run tests
6868
run: >
@@ -71,7 +71,7 @@ jobs:
7171
-f py${PYTHON//./}-tests
7272
7373
- name: Upload coverage data
74-
uses: actions/upload-artifact@v4
74+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
7575
with:
7676
name: coverage-data-${{ matrix.python-version }}
7777
path: .coverage.*
@@ -92,16 +92,16 @@ jobs:
9292
if: always()
9393

9494
steps:
95-
- uses: actions/checkout@v5
95+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9696
with:
9797
persist-credentials: false
98-
- uses: actions/setup-python@v5
98+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
9999
with:
100100
python-version-file: .python-version-default
101-
- uses: hynek/setup-cached-uv@v2
101+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
102102

103103
- name: Download coverage data
104-
uses: actions/download-artifact@v5
104+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
105105
with:
106106
pattern: coverage-data-*
107107
merge-multiple: true
@@ -120,7 +120,7 @@ jobs:
120120
coverage report --fail-under=100
121121
122122
- name: Upload HTML report if check failed.
123-
uses: actions/upload-artifact@v4
123+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
124124
with:
125125
name: html-report
126126
path: htmlcov
@@ -134,15 +134,15 @@ jobs:
134134

135135
steps:
136136
- name: Download pre-built packages
137-
uses: actions/download-artifact@v5
137+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
138138
with:
139139
name: Packages
140140
path: dist
141141
- run: tar xf dist/*.tar.gz --strip-components=1
142-
- uses: actions/setup-python@v5
142+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
143143
with:
144144
python-version-file: .python-version-default
145-
- uses: hynek/setup-cached-uv@v2
145+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
146146

147147
- run: >
148148
uvx --with tox-uv
@@ -155,15 +155,15 @@ jobs:
155155
needs: build-package
156156
steps:
157157
- name: Download pre-built packages
158-
uses: actions/download-artifact@v5
158+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
159159
with:
160160
name: Packages
161161
path: dist
162162
- run: tar xf dist/*.tar.gz --strip-components=1
163-
- uses: actions/setup-python@v5
163+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
164164
with:
165165
python-version-file: .python-version-default
166-
- uses: hynek/setup-cached-uv@v2
166+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
167167

168168
- run: >
169169
uvx --with tox-uv
@@ -176,16 +176,16 @@ jobs:
176176
runs-on: ubuntu-latest
177177
steps:
178178
- name: Download pre-built packages
179-
uses: actions/download-artifact@v5
179+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
180180
with:
181181
name: Packages
182182
path: dist
183183
- run: tar xf dist/*.tar.gz --strip-components=1
184-
- uses: actions/setup-python@v5
184+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
185185
with:
186186
# Keep in sync with tox.ini/docs & .readthedocs.yaml
187187
python-version: "3.13"
188-
- uses: hynek/setup-cached-uv@v2
188+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
189189

190190
- run: >
191191
uvx --with tox-uv
@@ -200,13 +200,13 @@ jobs:
200200
os: [ubuntu-latest, windows-latest]
201201

202202
steps:
203-
- uses: actions/checkout@v5
203+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
204204
with:
205205
persist-credentials: false
206-
- uses: actions/setup-python@v5
206+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
207207
with:
208208
python-version-file: .python-version-default
209-
- uses: hynek/setup-cached-uv@v2
209+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
210210

211211
- run: uv venv
212212
- run: uv pip install -e . --group dev
@@ -243,13 +243,13 @@ jobs:
243243
runs-on: ubuntu-latest
244244

245245
steps:
246-
- uses: actions/checkout@v5
246+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
247247
with:
248248
persist-credentials: false
249-
- uses: actions/setup-python@v5
249+
- uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
250250
with:
251251
python-version-file: .python-version-default
252-
- uses: hynek/setup-cached-uv@v2
252+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
253253

254254
- run: >
255255
uvx --with=tox-uv

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,17 +24,17 @@ jobs:
2424

2525
steps:
2626
- name: Checkout repository
27-
uses: actions/checkout@v5
27+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2828
with:
2929
persist-credentials: false
3030

3131
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@v3
32+
uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
3333
with:
3434
languages: ${{ matrix.language }}
3535

3636
- name: Autobuild
37-
uses: github/codeql-action/autobuild@v3
37+
uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
3838

3939
- name: Perform CodeQL Analysis
40-
uses: github/codeql-action/analyze@v3
40+
uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3

‎.github/workflows/pypi-package.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121
id-token: write
2222

2323
steps:
24-
- uses: actions/checkout@v5
24+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2525
with:
2626
fetch-depth: 0
2727
persist-credentials: false
2828

29-
- uses: hynek/build-and-inspect-python-package@v2
29+
- uses: hynek/build-and-inspect-python-package@c52c3a4710070b50470d903818a7b25115dcd076 # v2.13.0
3030
with:
3131
attest-build-provenance-github: 'true'
3232

@@ -43,13 +43,13 @@ jobs:
4343

4444
steps:
4545
- name: Download packages built by build-and-inspect-python-package
46-
uses: actions/download-artifact@v5
46+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
4747
with:
4848
name: Packages
4949
path: dist
5050

5151
- name: Upload package to Test PyPI
52-
uses: pypa/gh-action-pypi-publish@release/v1
52+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
5353
with:
5454
repository-url: https://test.pypi.org/legacy/
5555

@@ -66,10 +66,10 @@ jobs:
6666

6767
steps:
6868
- name: Download packages built by build-and-inspect-python-package
69-
uses: actions/download-artifact@v5
69+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
7070
with:
7171
name: Packages
7272
path: dist
7373

7474
- name: Upload package to PyPI
75-
uses: pypa/gh-action-pypi-publish@release/v1
75+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

‎.github/workflows/zizmor.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,18 +19,18 @@ jobs:
1919
security-events: write
2020
steps:
2121
- name: Checkout repository
22-
uses: actions/checkout@v5
22+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2323
with:
2424
persist-credentials: false
25-
- uses: hynek/setup-cached-uv@v2
25+
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
2626

2727
- name: Run zizmor 🌈
2828
run: uvx zizmor --format sarif . > results.sarif
2929
env:
3030
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3131

3232
- name: Upload SARIF file
33-
uses: github/codeql-action/upload-sarif@v3
33+
uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
3434
with:
3535
# Path to SARIF file relative to the root of the repository
3636
sarif_file: results.sarif

‎zizmor.yml‎

Lines changed: 0 additions & 10 deletions
This file was deleted.

0 commit comments

Comments
 (0)