Skip to content

Commit 3155f0c

Browse files
YuriiMotovYuriiMotov
authored
🔒 Pin GitHub actions by commit SHA (#1840)
1 parent c1a09f2 commit 3155f0c

13 files changed

+49
-49
lines changed

‎.github/workflows/add-to-project.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
name: Add to project
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/add-to-project@v1.0.2
15+
- uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
1616
with:
1717
project-url: https://github.com/orgs/fastapi/projects/2
1818
github-token: ${{ secrets.PROJECTS_TOKEN }}

‎.github/workflows/build-docs.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,9 @@ jobs:
1818
outputs:
1919
docs: ${{ steps.filter.outputs.docs }}
2020
steps:
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
# For pull requests it's not necessary to checkout the code but for the main branch it is
23-
- uses: dorny/paths-filter@v4
23+
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
2424
id: filter
2525
with:
2626
filters: |
@@ -46,27 +46,27 @@ jobs:
4646
env:
4747
GITHUB_CONTEXT: ${{ toJson(github) }}
4848
run: echo "$GITHUB_CONTEXT"
49-
- uses: actions/checkout@v6
49+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5050
- name: Set up Python
51-
uses: actions/setup-python@v6
51+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
5252
with:
5353
python-version-file: ".python-version"
5454
- name: Setup uv
55-
uses: astral-sh/setup-uv@v7
55+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
5656
with:
5757
enable-cache: true
5858
cache-dependency-glob: |
5959
pyproject.toml
6060
uv.lock
6161
- name: Install docs extras
6262
run: uv sync --locked --no-dev --group docs
63-
- uses: actions/cache@v5
63+
- uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
6464
with:
6565
key: mkdocs-cards-${{ github.ref }}
6666
path: .cache
6767
- name: Build Docs
6868
run: uv run ./scripts/docs.py build
69-
- uses: actions/upload-artifact@v7
69+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
7070
with:
7171
name: docs-site
7272
path: ./site/**
@@ -80,7 +80,7 @@ jobs:
8080
runs-on: ubuntu-latest
8181
steps:
8282
- name: Decide whether the needed jobs succeeded or failed
83-
uses: re-actors/alls-green@release/v1
83+
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
8484
with:
8585
jobs: ${{ toJSON(needs) }}
8686
allowed-skips: build-docs

‎.github/workflows/deploy-docs.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,13 +20,13 @@ jobs:
2020
env:
2121
GITHUB_CONTEXT: ${{ toJson(github) }}
2222
run: echo "$GITHUB_CONTEXT"
23-
- uses: actions/checkout@v6
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
- name: Set up Python
25-
uses: actions/setup-python@v6
25+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2626
with:
2727
python-version-file: ".python-version"
2828
- name: Setup uv
29-
uses: astral-sh/setup-uv@v7
29+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
3030
with:
3131
enable-cache: true
3232
cache-dependency-glob: |
@@ -45,7 +45,7 @@ jobs:
4545
run: |
4646
rm -rf ./site
4747
mkdir ./site
48-
- uses: actions/download-artifact@v8
48+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
4949
with:
5050
path: ./site/
5151
pattern: docs-site
@@ -59,7 +59,7 @@ jobs:
5959
env:
6060
PROJECT_NAME: sqlmodel
6161
BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
62-
uses: cloudflare/wrangler-action@v3
62+
uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
6363
with:
6464
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
6565
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

‎.github/workflows/detect-conflicts.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
runs-on: ubuntu-latest
1313
steps:
1414
- name: Check if PRs have merge conflicts
15-
uses: eps1lon/actions-label-merge-conflict@v3
15+
uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
1616
with:
1717
dirtyLabel: "conflicts"
1818
repoToken: "${{ secrets.GITHUB_TOKEN }}"

‎.github/workflows/issue-manager.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
env:
2828
GITHUB_CONTEXT: ${{ toJson(github) }}
2929
run: echo "$GITHUB_CONTEXT"
30-
- uses: tiangolo/issue-manager@0.6.0
30+
- uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
3131
with:
3232
token: ${{ secrets.GITHUB_TOKEN }}
3333
config: >

‎.github/workflows/labeler.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
pull-requests: write
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/labeler@v6
19+
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
2020
if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
2121
- run: echo "Done adding labels"
2222
# Run this after labeler applied labels
@@ -27,7 +27,7 @@ jobs:
2727
pull-requests: read
2828
runs-on: ubuntu-latest
2929
steps:
30-
- uses: docker://agilepathway/pull-request-label-checker:latest
30+
- uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
3131
with:
3232
one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
3333
repo_token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/latest-changes.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,17 +20,17 @@ jobs:
2020
latest-changes:
2121
runs-on: ubuntu-latest
2222
steps:
23-
- uses: actions/checkout@v6
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
with:
2525
# To allow latest-changes to commit to the main branch
2626
token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
2727
# Allow debugging with tmate
2828
- name: Setup tmate session
29-
uses: mxschmitt/action-tmate@v3
29+
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
3030
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
3131
with:
3232
limit-access-to-actor: true
33-
- uses: tiangolo/latest-changes@0.4.1
33+
- uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
3434
with:
3535
token: ${{ secrets.GITHUB_TOKEN }}
3636
latest_changes_file: docs/release-notes.md

‎.github/workflows/pre-commit.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
env:
1919
GITHUB_CONTEXT: ${{ toJson(github) }}
2020
run: echo "$GITHUB_CONTEXT"
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
name: Checkout PR for own repo
2323
if: env.HAS_SECRETS == 'true'
2424
with:
@@ -30,19 +30,19 @@ jobs:
3030
# A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
3131
token: ${{ secrets.PRE_COMMIT }}
3232
# pre-commit lite ci needs the default checkout configs to work
33-
- uses: actions/checkout@v6
33+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434
name: Checkout PR for fork
3535
if: env.HAS_SECRETS == 'false'
3636
with:
3737
# To be able to commit it needs the head branch of the PR, the remote one
3838
ref: ${{ github.event.pull_request.head.sha }}
3939
fetch-depth: 0
4040
- name: Set up Python
41-
uses: actions/setup-python@v6
41+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4242
with:
4343
python-version-file: ".python-version"
4444
- name: Setup uv
45-
uses: astral-sh/setup-uv@v7
45+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
4646
with:
4747
cache-dependency-glob: |
4848
pyproject.toml
@@ -65,7 +65,7 @@ jobs:
6565
git commit -m "🎨 Auto format"
6666
git push
6767
fi
68-
- uses: pre-commit-ci/lite-action@v1.1.0
68+
- uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
6969
if: env.HAS_SECRETS == 'false'
7070
with:
7171
msg: 🎨 Auto format
@@ -85,6 +85,6 @@ jobs:
8585
GITHUB_CONTEXT: ${{ toJson(github) }}
8686
run: echo "$GITHUB_CONTEXT"
8787
- name: Decide whether the needed jobs succeeded or failed
88-
uses: re-actors/alls-green@release/v1
88+
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
8989
with:
9090
jobs: ${{ toJSON(needs) }}

‎.github/workflows/publish.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,13 +22,13 @@ jobs:
2222
env:
2323
GITHUB_CONTEXT: ${{ toJson(github) }}
2424
run: echo "$GITHUB_CONTEXT"
25-
- uses: actions/checkout@v6
25+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2626
- name: Set up Python
27-
uses: actions/setup-python@v6
27+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2828
with:
2929
python-version-file: ".python-version"
3030
- name: Install uv
31-
uses: astral-sh/setup-uv@v7
31+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
3232
- name: Build distribution
3333
run: uv build
3434
- name: Publish

‎.github/workflows/smokeshow.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,18 +12,18 @@ jobs:
1212
smokeshow:
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/checkout@v6
16-
- uses: actions/setup-python@v6
15+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
16+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1717
with:
1818
python-version-file: ".python-version"
1919
- name: Setup uv
20-
uses: astral-sh/setup-uv@v7
20+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2121
with:
2222
cache-dependency-glob: |
2323
pyproject.toml
2424
uv.lock
2525
- run: uv sync --locked --no-dev --group github-actions
26-
- uses: actions/download-artifact@v8
26+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
2727
with:
2828
name: coverage-html
2929
path: htmlcov

0 commit comments

Comments
 (0)