Commit e808ccf0 authored by Benjamin Cabé's avatar Benjamin Cabé Committed by Anas Nashif
Browse files

ci: pin GitHub Actions to SHAs 

This commit updates all GitHub Actions workflows to use specific
SHAs for the actions when they're not GitHub owned (`actions/*`)
instead of using tag-based versioning since tags are mutable.

Signed-off-by: default avatarBenjamin Cabé <benjamin@zephyrproject.org>
parent ef954835

.github/workflows/backport.yml

+1 −1
Changes for .github/workflows/backport.yml: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -24,7 +24,7 @@ jobs: 
      )

    steps:

      - name: Backport

        uses: zephyrproject-rtos/action-backport@v2.0.3-3

        uses: zephyrproject-rtos/action-backport@7e74f601d11eaca577742445e87775b5651a965f # v2.0.3-3

        with:

          github_token: ${{ secrets.ZB_GITHUB_TOKEN }}

          issue_labels: Backport

.github/workflows/bsim-tests-publish.yaml

+2 −2
Changes for .github/workflows/bsim-tests-publish.yaml: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -13,12 +13,12 @@ jobs: 


    steps:

      - name: Download artifacts

        uses: dawidd6/action-download-artifact@v8

        uses: dawidd6/action-download-artifact@20319c5641d495c8a52e688b7dc5fada6c3a9fbc # v8

        with:

          run_id: ${{ github.event.workflow_run.id }}



      - name: Publish BabbleSim Test Results

        uses: EnricoMi/publish-unit-test-result-action@v2

        uses: EnricoMi/publish-unit-test-result-action@170bf24d20d201b842d7a52403b73ed297e6645b # v2.18.0

        with:

          check_name: BabbleSim Test Results

          comment_mode: off

.github/workflows/bsim-tests.yaml

+5 −5
Changes for .github/workflows/bsim-tests.yaml: 5 added lines, 5 removed lines.
Original line number Diff line number Diff line
@@ -91,7 +91,7 @@ jobs: 
          echo "ZEPHYR_SDK_INSTALL_DIR=/opt/toolchains/zephyr-sdk-$( cat SDK_VERSION )" >> $GITHUB_ENV



      - name: Check common triggering files

        uses: tj-actions/changed-files@v45

        uses: tj-actions/changed-files@2f7c5bfce28377bc069a65ba478de0a74aa0ca32 # v46.0.1

        id: check-common-files

        with:

          files: |
@@ -110,7 +110,7 @@ jobs: 
            modules/hal_nordic/**



      - name: Check if Bluethooth files changed

        uses: tj-actions/changed-files@v45

        uses: tj-actions/changed-files@2f7c5bfce28377bc069a65ba478de0a74aa0ca32 # v46.0.1

        id: check-bluetooth-files

        with:

          files: |
@@ -119,7 +119,7 @@ jobs: 
            subsys/bluetooth/



      - name: Check if Networking files changed

        uses: tj-actions/changed-files@v45

        uses: tj-actions/changed-files@2f7c5bfce28377bc069a65ba478de0a74aa0ca32 # v46.0.1

        id: check-networking-files

        with:

          files: |
@@ -132,7 +132,7 @@ jobs: 
            include/zephyr/net/ieee802154*



      - name: Check if UART files changed

        uses: tj-actions/changed-files@v45

        uses: tj-actions/changed-files@2f7c5bfce28377bc069a65ba478de0a74aa0ca32 # v46.0.1

        id: check-uart-files

        with:

          files: |
@@ -186,7 +186,7 @@ jobs: 
            junit.html



      - name: Publish Unit Test Results

        uses: EnricoMi/publish-unit-test-result-action@v2

        uses: EnricoMi/publish-unit-test-result-action@170bf24d20d201b842d7a52403b73ed297e6645b # v2.18.0

        with:

          check_name: Bsim Test Results

          files: "junit.xml"

.github/workflows/bug_snapshot.yaml

+1 −1
Changes for .github/workflows/bug_snapshot.yaml: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -41,7 +41,7 @@ jobs: 
        echo "BUGS_PICKLE_PATH=${BUGS_PICKLE_PATH}" >> ${GITHUB_ENV}



    - name: Configure AWS Credentials

      uses: aws-actions/configure-aws-credentials@v4

      uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0

      with:

        aws-access-key-id: ${{ vars.AWS_BUILDS_ZEPHYR_BUG_SNAPSHOT_ACCESS_KEY_ID }}

        aws-secret-access-key: ${{ secrets.AWS_BUILDS_ZEPHYR_BUG_SNAPSHOT_SECRET_ACCESS_KEY }}

.github/workflows/codecov.yaml

+1 −1
Changes for .github/workflows/codecov.yaml: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -220,7 +220,7 @@ jobs: 


      - name: Upload coverage to Codecov

        if: always()

        uses: codecov/codecov-action@v5

        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0

        with:

          env_vars: OS,PYTHON

          fail_ci_if_error: false

CRA Git | Maintained and supported by SUSTech CRA and CCSE