Skip to content

Commit 04083ca

Browse files
bmartybmarty
authored
Pin commit sha on GitHub actions (#4653)
* Use Git SHA instead of version. * Use version instead of main branch.
1 parent 3167148 commit 04083ca

15 files changed

+34
-34
lines changed

‎.github/workflows/build.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ jobs:
6969
retention-days: 5
7070
overwrite: true
7171
if-no-files-found: error
72-
- uses: rnkdsh/[email protected]
72+
- uses: rnkdsh/action-upload-diawi@d2e5212dedc5e05133afe89bc12dfe2dd9e7e9c6 # v1.5.8
7373
id: diawi
7474
# Do not fail the whole build if Diawi upload fails
7575
continue-on-error: true
@@ -81,7 +81,7 @@ jobs:
8181
file: app/build/outputs/apk/gplay/debug/app-gplay-arm64-v8a-debug.apk
8282
- name: Add or update PR comment with QR Code to download APK.
8383
if: ${{ matrix.variant == 'debug' && github.event_name == 'pull_request' && steps.diawi.conclusion == 'success' }}
84-
uses: NejcZdovc/comment-pr@v2
84+
uses: NejcZdovc/comment-pr@a423635d183a8259308e80593c96fecf31539c26 # v2.1.0
8585
with:
8686
message: |
8787
:iphone: Scan the QR code below to install the build (arm64 only) for this PR.

‎.github/workflows/build_enterprise.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
# https://github.com/actions/checkout/issues/881
3434
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
3535
- name: Add SSH private keys for submodule repositories
36-
uses: webfactory/[email protected]
36+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
3737
with:
3838
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
3939
- name: Clone submodules

‎.github/workflows/danger.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
steps:
1212
- uses: actions/checkout@v4
1313
- name: Add SSH private keys for submodule repositories
14-
uses: webfactory/[email protected]
14+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
1515
with:
1616
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
1717
- name: Clone submodules
@@ -20,7 +20,7 @@ jobs:
2020
- run: |
2121
npm install --save-dev @babel/plugin-transform-flow-strip-types
2222
- name: Danger
23-
uses: danger/[email protected]
23+
uses: danger/danger-js@bdccecb77e0144055fbaea9224f10cf8b1229b68 # 13.0.4
2424
with:
2525
args: "--dangerfile ./tools/danger/dangerfile.js"
2626
env:

‎.github/workflows/generate_github_pages.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
1313
steps:
1414
- name: ⏬ Checkout with LFS
15-
uses: nschloe/[email protected]
15+
uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
1616
- name: Use JDK 21
1717
uses: actions/setup-java@v4
1818
with:
@@ -32,7 +32,7 @@ jobs:
3232
mkdir -p screenshots/en
3333
cp tests/uitests/src/test/snapshots/images/* screenshots/en
3434
- name: Deploy GitHub Pages
35-
uses: peaceiris/actions-gh-pages@v4
35+
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
3636
with:
3737
github_token: ${{ secrets.GITHUB_TOKEN }}
3838
publish_dir: ./screenshots

‎.github/workflows/gradle-wrapper-update.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
distribution: 'temurin' # See 'Supported distributions' for available options
2020
java-version: '21'
2121
- name: Update Gradle Wrapper
22-
uses: gradle-update/update-gradle-wrapper-action@v2
22+
uses: gradle-update/update-gradle-wrapper-action@512b1875f3b6270828abfe77b247d5895a2da1e5 # v2.1.0
2323
with:
2424
repo-token: ${{ secrets.DANGER_GITHUB_API_TOKEN }}
2525
target-branch: develop

‎.github/workflows/nightlyReports.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
if: ${{ github.repository == 'element-hq/element-x-android' }}
1919
steps:
2020
- name: ⏬ Checkout with LFS
21-
uses: nschloe/[email protected]
21+
uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
2222

2323
- name: Use JDK 21
2424
uses: actions/setup-java@v4

‎.github/workflows/quality.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
steps:
2020
- uses: actions/checkout@v4
2121
- name: Add SSH private keys for submodule repositories
22-
uses: webfactory/[email protected]
22+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
2323
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
2424
with:
2525
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -77,7 +77,7 @@ jobs:
7777
# https://github.com/actions/checkout/issues/881
7878
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
7979
- name: Add SSH private keys for submodule repositories
80-
uses: webfactory/[email protected]
80+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
8181
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
8282
with:
8383
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -117,7 +117,7 @@ jobs:
117117
# https://github.com/actions/checkout/issues/881
118118
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
119119
- name: Add SSH private keys for submodule repositories
120-
uses: webfactory/[email protected]
120+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
121121
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
122122
with:
123123
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -161,7 +161,7 @@ jobs:
161161
# https://github.com/actions/checkout/issues/881
162162
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
163163
- name: Add SSH private keys for submodule repositories
164-
uses: webfactory/[email protected]
164+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
165165
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
166166
with:
167167
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -201,7 +201,7 @@ jobs:
201201
# https://github.com/actions/checkout/issues/881
202202
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
203203
- name: Add SSH private keys for submodule repositories
204-
uses: webfactory/[email protected]
204+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
205205
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
206206
with:
207207
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -241,7 +241,7 @@ jobs:
241241
# https://github.com/actions/checkout/issues/881
242242
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
243243
- name: Add SSH private keys for submodule repositories
244-
uses: webfactory/[email protected]
244+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
245245
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
246246
with:
247247
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -294,7 +294,7 @@ jobs:
294294
yarn add danger-plugin-lint-report --dev
295295
- name: Danger lint
296296
if: always()
297-
uses: danger/[email protected]
297+
uses: danger/danger-js@bdccecb77e0144055fbaea9224f10cf8b1229b68 # 13.0.4
298298
with:
299299
args: "--dangerfile ./tools/danger/dangerfile-lint.js"
300300
env:

‎.github/workflows/recordScreenshots.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,18 +19,18 @@ jobs:
1919
steps:
2020
- name: Remove Record-Screenshots label
2121
if: github.event.label.name == 'Record-Screenshots'
22-
uses: actions-ecosystem/action-remove-labels@v1
22+
uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1.3.0
2323
with:
2424
labels: Record-Screenshots
2525
- name: ⏬ Checkout with LFS (PR)
2626
if: github.event.label.name == 'Record-Screenshots'
27-
uses: nschloe/[email protected]
27+
uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
2828
with:
2929
persist-credentials: false
3030
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.ref }}
3131
- name: ⏬ Checkout with LFS (Branch)
3232
if: github.event_name == 'workflow_dispatch'
33-
uses: nschloe/[email protected]
33+
uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
3434
with:
3535
persist-credentials: false
3636
- name: ☕️ Use JDK 21

‎.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ jobs:
5454
steps:
5555
- uses: actions/checkout@v4
5656
- name: Add SSH private keys for submodule repositories
57-
uses: webfactory/[email protected]
57+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
5858
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
5959
with:
6060
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}

‎.github/workflows/sync-localazy.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
./tools/localazy/importSupportedLocalesFromLocalazy.py
3737
./tools/test/generateAllScreenshots.py
3838
- name: Create Pull Request for Strings
39-
uses: peter-evans/create-pull-request@v7
39+
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
4040
with:
4141
token: ${{ secrets.DANGER_GITHUB_API_TOKEN }}
4242
commit-message: Sync Strings from Localazy

‎.github/workflows/sync-sas-strings.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- name: Run SAS String script
2424
run: ./tools/sas/import_sas_strings.py
2525
- name: Create Pull Request for SAS Strings
26-
uses: peter-evans/create-pull-request@v7
26+
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
2727
with:
2828
commit-message: Sync SAS Strings
2929
title: Sync SAS Strings

‎.github/workflows/tests.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,13 +33,13 @@ jobs:
3333
sudo swapon /mnt/swapfile
3434
sudo swapon --show
3535
- name: ⏬ Checkout with LFS
36-
uses: nschloe/[email protected]
36+
uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
3737
with:
3838
# Ensure we are building the branch and not the branch after being merged on develop
3939
# https://github.com/actions/checkout/issues/881
4040
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
4141
- name: Add SSH private keys for submodule repositories
42-
uses: webfactory/[email protected]
42+
uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
4343
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'element-hq/element-x-android' }}
4444
with:
4545
ssh-private-key: ${{ secrets.ELEMENT_ENTERPRISE_DEPLOY_KEY }}
@@ -82,7 +82,7 @@ jobs:
8282
8383
# https://github.com/codecov/codecov-action
8484
- name: ☂️ Upload coverage reports to codecov
85-
uses: codecov/codecov-action@v5
85+
uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
8686
with:
8787
fail_ci_if_error: true
8888
token: ${{ secrets.CODECOV_TOKEN }}

‎.github/workflows/triage-incoming.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ jobs:
88
triage-new-issues:
99
runs-on: ubuntu-latest
1010
steps:
11-
- uses: actions/add-to-project@main
11+
- uses: actions/add-to-project@v1.0.2
1212
with:
1313
project-url: https://github.com/orgs/element-hq/projects/91
1414
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}

‎.github/workflows/triage-labelled.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
if: >
1313
github.repository == 'element-hq/element-x-android'
1414
steps:
15-
- uses: actions/add-to-project@main
15+
- uses: actions/add-to-project@v1.0.2
1616
with:
1717
project-url: https://github.com/orgs/element-hq/projects/43
1818
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}
@@ -21,15 +21,15 @@ jobs:
2121
name: Move triaged needs info issues on board
2222
runs-on: ubuntu-latest
2323
steps:
24-
- uses: actions/add-to-project@main
24+
- uses: actions/add-to-project@v1.0.2
2525
id: addItem
2626
with:
2727
project-url: https://github.com/orgs/element-hq/projects/91
2828
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}
2929
labeled: X-Needs-Info
3030
- name: Print itemId
3131
run: echo ${{ steps.addItem.outputs.itemId }}
32-
- uses: kalgurn/update-project-item-status@main
32+
- uses: kalgurn/update-project-item-status@31e54df46a2cdaef4f85c31ac839fbcd2fd7c3a2 # 0.0.3
3333
if: ${{ steps.addItem.outputs.itemId }}
3434
with:
3535
project-url: https://github.com/orgs/element-hq/projects/91
@@ -43,7 +43,7 @@ jobs:
4343
if: >
4444
contains(github.event.issue.labels.*.name, 'Team: Element X Feature')
4545
steps:
46-
- uses: actions/add-to-project@main
46+
- uses: actions/add-to-project@v1.0.2
4747
with:
4848
project-url: https://github.com/orgs/element-hq/projects/73
4949
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}
@@ -54,7 +54,7 @@ jobs:
5454
if: >
5555
contains(github.event.issue.labels.*.name, 'Team: Verticals Feature')
5656
steps:
57-
- uses: actions/add-to-project@main
57+
- uses: actions/add-to-project@v1.0.2
5858
with:
5959
project-url: https://github.com/orgs/element-hq/projects/57
6060
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}
@@ -66,7 +66,7 @@ jobs:
6666
contains(github.event.issue.labels.*.name, 'Team: QA') ||
6767
contains(github.event.issue.labels.*.name, 'X-Needs-Signoff')
6868
steps:
69-
- uses: actions/add-to-project@main
69+
- uses: actions/add-to-project@v1.0.2
7070
with:
7171
project-url: https://github.com/orgs/element-hq/projects/69
7272
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}
@@ -77,7 +77,7 @@ jobs:
7777
if: >
7878
contains(github.event.issue.labels.*.name, 'X-Needs-Signoff')
7979
steps:
80-
- uses: actions/add-to-project@main
80+
- uses: actions/add-to-project@v1.0.2
8181
with:
8282
project-url: https://github.com/orgs/element-hq/projects/89
8383
github-token: ${{ secrets.ELEMENT_BOT_TOKEN }}

‎.github/workflows/validate-lfs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ jobs:
77
runs-on: ubuntu-latest
88
name: Validate
99
steps:
10-
- uses: nschloe/[email protected]
10+
- uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 # v1.2.3
1111

1212
- run: |
1313
./tools/git/validate_lfs.sh

0 commit comments

Comments
 (0)