fix: Increment actions versions & reference with SHA

datasciencecampus · Jul 9, 2024 · 923070a · 923070a
1 parent 6708643
commit 923070a
Show file tree

Hide file tree

Showing 5 changed files with 18 additions and 18 deletions.
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
@@ -23,17 +23,17 @@ jobs:
         python-version: ["3.9"]
         os: ["macos-12"]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # SHA for v4.1.7
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v3
+      uses: actions/setup-python@9a7ac94420f42ee15fc60ab88d0dca4be1fd5757 # SHA for v5.1.0
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install '.[test]'
     - name: Install java
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # SHA for v4.2.1
       with:
         distribution: 'temurin'
         java-version: '11.0.21'

diff --git a/.github/workflows/python-package-linux.yml b/.github/workflows/python-package-linux.yml
@@ -21,9 +21,9 @@ jobs:
         python-version: ["3.9"]
         os: ["ubuntu-22.04"]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # SHA for v4.1.7
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v3
+      uses: actions/setup-python@9a7ac94420f42ee15fc60ab88d0dca4be1fd5757 # SHA for v5.1.0
       with:
         python-version: ${{ matrix.python-version }}
         cache: 'pip'
@@ -32,7 +32,7 @@ jobs:
         python -m pip install --upgrade pip
         pip install '.[test]'
     - name: Install java
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # SHA for v4.2.1
       with:
         distribution: 'temurin'
         java-version: '11.0.21'

diff --git a/.github/workflows/python-package-mac.yml b/.github/workflows/python-package-mac.yml
@@ -22,17 +22,17 @@ jobs:
         python-version: ["3.9"]
         os: ["macos-12"]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # SHA for v4.1.7
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v3
+      uses: actions/setup-python@9a7ac94420f42ee15fc60ab88d0dca4be1fd5757 # SHA for v5.1.0
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install '.[dev,test]'
     - name: Install java
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # SHA for v4.2.1
       with:
         distribution: 'temurin'
         java-version: '11.0.21'
@@ -53,7 +53,7 @@ jobs:
         coverage run -m pytest
         coverage xml
     - name: Upload coverage reports to Codecov
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # SHA for v3.1.6
       with:
         file: ./coverage.xml
         flags: unittests

diff --git a/.github/workflows/python-package-windows.yml b/.github/workflows/python-package-windows.yml
@@ -23,9 +23,9 @@ jobs:
         python-version: ["3.9"]
         os: ["windows-2022"]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # SHA for v4.1.7
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v3
+      uses: actions/setup-python@9a7ac94420f42ee15fc60ab88d0dca4be1fd5757 # SHA for v5.1.0
       with:
         python-version: ${{ matrix.python-version }}
         cache: 'pip'

diff --git a/.github/workflows/quarto-render.yml b/.github/workflows/quarto-render.yml
@@ -17,17 +17,17 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v3
-    - name: Set up Python ${{ env.PYTHON_VERSION }}
-      uses: actions/setup-python@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # SHA for v4.1.7
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@9a7ac94420f42ee15fc60ab88d0dca4be1fd5757 # SHA for v5.1.0
       with:
         python-version: ${{ env.PYTHON_VERSION }}
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install '.[docs]'
     - name: Install java
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # SHA for v4.2.1
       with:
         distribution: 'temurin'
         java-version: '11.0.21'
@@ -44,9 +44,9 @@ jobs:
       run: |
         python -m quartodoc build
     - name: Set up Quarto
-      uses: quarto-dev/quarto-actions/setup@v2
+      uses: quarto-dev/quarto-actions/setup@c1b50d36cf3c22b3dc7e530bd1b36634e824e545 # SHA for v2.1.4
     - name: Render and Publish
-      uses: quarto-dev/quarto-actions/publish@v2
+      uses: quarto-dev/quarto-actions/publish@c1b50d36cf3c22b3dc7e530bd1b36634e824e545 # SHA for v2.1.4
       with:
         target: gh-pages
       env: