Skip to content

Commit 17f05fa

Browse files
allenburgess1-nhsallenburgess1-nhs
committed
mesh-2092: pin action versions to commit sha
1 parent 3929034 commit 17f05fa

2 files changed

Lines changed: 20 additions & 20 deletions

File tree

‎.github/workflows/merge-develop.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
if: github.repository == 'NHSDigital/mesh-sandbox' && !contains(github.event.head_commit.message, 'tag release version:')
1515
steps:
1616
- name: checkout
17-
uses: actions/checkout@v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1818
with:
1919
fetch-depth: 0
2020

2121
- name: setup python
22-
uses: actions/setup-python@v6
22+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v
2323
with:
2424
python-version-file: "pyproject.toml"
2525

@@ -33,7 +33,7 @@ jobs:
3333
poetry self add "poetry-dynamic-versioning[plugin]"
3434
3535
- name: cache virtualenv
36-
uses: actions/cache@v5
36+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
3737
with:
3838
path: |
3939
.venv
@@ -52,7 +52,7 @@ jobs:
5252
5353
- name: setup java
5454
if: success() || failure()
55-
uses: actions/setup-java@v5
55+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
5656
with:
5757
distribution: "corretto"
5858
java-version: "11"
@@ -73,7 +73,7 @@ jobs:
7373

7474
- name: setup java
7575
if: github.actor != 'dependabot[bot]' && (success() || failure())
76-
uses: actions/setup-java@v5
76+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
7777
with:
7878
distribution: "corretto"
7979
java-version: "17"
@@ -116,7 +116,7 @@ jobs:
116116
if: github.repository == 'NHSDigital/mesh-sandbox' && github.actor != 'dependabot[bot]' && !contains(github.event.head_commit.message, 'tag release version:')
117117
steps:
118118
- name: checkout
119-
uses: actions/checkout@v6
119+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
120120
with:
121121
fetch-depth: 0
122122

@@ -126,7 +126,7 @@ jobs:
126126
find . -type f | xargs chmod g+w
127127
128128
- name: setup python
129-
uses: actions/setup-python@v6
129+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
130130
with:
131131
python-version-file: "pyproject.toml"
132132

@@ -148,7 +148,7 @@ jobs:
148148
149149
- name: create release
150150
id: create_release
151-
uses: actions/create-release@v1
151+
uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1
152152
continue-on-error: false
153153
env:
154154
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/pull-request.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
if: github.repository == 'NHSDigital/mesh-sandbox'
1515
steps:
1616
- name: checkout
17-
uses: actions/checkout@v6
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1818
with:
1919
fetch-depth: 0
2020

@@ -46,7 +46,7 @@ jobs:
4646
PR_BRANCH: ${{ github.head_ref }}
4747

4848
- name: setup python
49-
uses: actions/setup-python@v6
49+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
5050
with:
5151
python-version-file: "pyproject.toml"
5252

@@ -60,7 +60,7 @@ jobs:
6060
poetry self add "poetry-dynamic-versioning[plugin]"
6161
6262
- name: cache virtualenv
63-
uses: actions/cache@v5
63+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
6464
with:
6565
path: |
6666
.venv
@@ -82,7 +82,7 @@ jobs:
8282
8383
- name: setup java
8484
if: success() || failure()
85-
uses: actions/setup-java@v5
85+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
8686
with:
8787
distribution: "corretto"
8888
java-version: "11"
@@ -103,7 +103,7 @@ jobs:
103103

104104
- name: setup java
105105
if: success() || failure()
106-
uses: actions/setup-java@v5
106+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
107107
with:
108108
distribution: "corretto"
109109
java-version: "17"
@@ -133,7 +133,7 @@ jobs:
133133

134134
- name: archive reports
135135
if: success() || failure()
136-
uses: actions/upload-artifact@v7
136+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
137137
with:
138138
name: reports
139139
path: reports/**/*
@@ -158,7 +158,7 @@ jobs:
158158
if: github.repository == 'NHSDigital/mesh-sandbox'
159159
steps:
160160
- name: checkout
161-
uses: actions/checkout@v6
161+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
162162
with:
163163
fetch-depth: 0
164164

@@ -182,7 +182,7 @@ jobs:
182182
PR_BRANCH: ${{ github.head_ref }}
183183

184184
- name: setup python
185-
uses: actions/setup-python@v6
185+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
186186
with:
187187
python-version-file: "pyproject.toml"
188188

@@ -196,7 +196,7 @@ jobs:
196196
poetry self add "poetry-dynamic-versioning[plugin]"
197197
198198
- name: cache virtualenv
199-
uses: actions/cache@v5
199+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
200200
with:
201201
path: |
202202
.venv
@@ -244,7 +244,7 @@ jobs:
244244
- lint
245245
steps:
246246
- name: checkout
247-
uses: actions/checkout@v6
247+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
248248
with:
249249
fetch-depth: 0
250250

@@ -273,7 +273,7 @@ jobs:
273273
PR_BRANCH: ${{ github.head_ref }}
274274

275275
- name: setup python
276-
uses: actions/setup-python@v6
276+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
277277
with:
278278
python-version-file: "pyproject.toml"
279279

@@ -287,7 +287,7 @@ jobs:
287287
poetry self add "poetry-dynamic-versioning[plugin]"
288288
289289
- name: cache virtualenv
290-
uses: actions/cache@v5
290+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
291291
with:
292292
path: |
293293
.venv

0 commit comments

Comments
 (0)