summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSebastian Pipping <sebastian@pipping.org>2023-04-17 23:31:59 +0200
committerSebastian Pipping <sebastian@pipping.org>2023-04-17 23:31:59 +0200
commit8b6b5df740461114f91edff70b754fb4ed3e9955 (patch)
tree6e9de8279780284cd89d2e2283991e5f032781af
parent4b98a4e0012c5a9f2a562c7f08acdbf98aa330cb (diff)
downloadlibexpat-git-8b6b5df740461114f91edff70b754fb4ed3e9955.tar.gz
CI: Pin all GitHub Actions to specific commits for securitypin-github-actions-at-commit-level
-rw-r--r--.github/workflows/autotools-cmake.yml2
-rw-r--r--.github/workflows/cmake-required-version.yml2
-rw-r--r--.github/workflows/coverage.yml4
-rw-r--r--.github/workflows/cppcheck.yml2
-rw-r--r--.github/workflows/expat_config_h.yml2
-rw-r--r--.github/workflows/linux.yml2
-rw-r--r--.github/workflows/macos.yml2
-rw-r--r--.github/workflows/valid-xml.yml2
8 files changed, 9 insertions, 9 deletions
diff --git a/.github/workflows/autotools-cmake.yml b/.github/workflows/autotools-cmake.yml
index c7da5a59..3630bc6a 100644
--- a/.github/workflows/autotools-cmake.yml
+++ b/.github/workflows/autotools-cmake.yml
@@ -58,7 +58,7 @@ jobs:
shell: bash
runs-on: "${{ matrix.os }}"
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: (Linux) Install build dependencies
if: "${{ runner.os == 'Linux' }}"
diff --git a/.github/workflows/cmake-required-version.yml b/.github/workflows/cmake-required-version.yml
index 28c3811d..fe84ad0a 100644
--- a/.github/workflows/cmake-required-version.yml
+++ b/.github/workflows/cmake-required-version.yml
@@ -43,7 +43,7 @@ jobs:
name: Ensure realistic minimum CMake version requirement
runs-on: ubuntu-20.04
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install ancient CMake
run: |
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 9fdd3e1c..8f3e6788 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -45,7 +45,7 @@ jobs:
env:
CFLAGS: -g3 -pipe
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install build dependencies
run: |-
set -x -u
@@ -81,7 +81,7 @@ jobs:
exec ./.travis.sh
- name: Store coverage .info and HTML report
- uses: actions/upload-artifact@v3.1.2
+ uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
with:
name: coverage
path: expat/coverage__*/
diff --git a/.github/workflows/cppcheck.yml b/.github/workflows/cppcheck.yml
index 7e1fd99e..1d0fc29e 100644
--- a/.github/workflows/cppcheck.yml
+++ b/.github/workflows/cppcheck.yml
@@ -43,7 +43,7 @@ jobs:
name: Run Cppcheck
runs-on: macos-11
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install runtime dependencies
run: |
exec brew install cppcheck findutils
diff --git a/.github/workflows/expat_config_h.yml b/.github/workflows/expat_config_h.yml
index 772505b0..800391d0 100644
--- a/.github/workflows/expat_config_h.yml
+++ b/.github/workflows/expat_config_h.yml
@@ -43,7 +43,7 @@ jobs:
name: Check expat_config.h.{in,cmake} for regressions
runs-on: ubuntu-20.04
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Check expat_config.h.{in,cmake} for regressions
run: |
set -v
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 6242640b..16bca24c 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -83,7 +83,7 @@ jobs:
env:
CFLAGS: -g3 -pipe
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install build dependencies (MinGW)
if: "${{ contains(matrix.FLAT_ENV, 'mingw') }}"
run: |-
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 8a3e4449..5845e1c4 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -53,7 +53,7 @@ jobs:
FLAT_ENV: CC=clang CXX=clang++ LD=clang++ QA_SANITIZER=address
runs-on: macos-11
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install build dependencies
run: |
sudo rm /usr/local/bin/2to3 # so that "brew link" will work
diff --git a/.github/workflows/valid-xml.yml b/.github/workflows/valid-xml.yml
index 7c50d48e..423deaf4 100644
--- a/.github/workflows/valid-xml.yml
+++ b/.github/workflows/valid-xml.yml
@@ -43,7 +43,7 @@ jobs:
name: Ensure well-formed and valid XML
runs-on: ubuntu-20.04
steps:
- - uses: actions/checkout@v3.5.2
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
- name: Install build dependencies
run: |-