From 9d4c6f64c1fb65d8496622c7dbd4f70a2cbf5c1e Mon Sep 17 00:00:00 2001 From: Ignacio Rodriguez Paez Date: Thu, 12 Nov 2026 12:13:20 +0000 Subject: [PATCH] Pin GitHub Actions to commit SHAs The org now requires actions to be pinned to a full-length commit SHA. Pin every uses: reference to the commit its tag or branch resolves to today, with the version as a comment, so the code that runs is unchanged. --- .github/workflows/building-with-nmake.yml | 2 +- .github/workflows/building-with-pegof.yml | 4 ++-- .github/workflows/code-coverage-on-ubuntu.yml | 4 ++-- .github/workflows/cross-compile-for--netbsd-on-ubuntu.yml | 2 +- .github/workflows/cross-compile-for-android-on-macos.yml | 2 +- .github/workflows/cross-compile-for-android-on-ubuntu.yml | 2 +- .github/workflows/cross-compile-for-freebsd-on-ubuntu.yml | 2 +- .github/workflows/cross-compile-for-linux-on-ubuntu.yml | 2 +- .github/workflows/cross-compile-for-openbsd-on-ubuntu.yml | 2 +- .github/workflows/cross-compile-for-windows-on-macos.yml | 2 +- .github/workflows/cross-compile-for-windows-on-ubuntu.yml | 2 +- .github/workflows/run-citre-tests.yml | 4 ++-- .github/workflows/tagging.yml | 2 +- .github/workflows/testing-on-alpine.yml | 4 ++-- .github/workflows/testing-on-cygwin.yml | 2 +- .github/workflows/testing-on-freebsd.yml | 4 ++-- .github/workflows/testing-on-macos.yml | 2 +- .github/workflows/testing-on-msys2.yml | 4 ++-- .github/workflows/testing-on-netbsd.yml | 4 ++-- .github/workflows/testing-on-openbsd.yml | 4 ++-- .github/workflows/testing-on-ubi.yml | 2 +- .github/workflows/testing-on-ubuntu.yml | 2 +- .github/workflows/testing-with-valgrind.yml | 2 +- 23 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/building-with-nmake.yml b/.github/workflows/building-with-nmake.yml index 08c24d477b..a5a4f4e867 100644 --- a/.github/workflows/building-with-nmake.yml +++ b/.github/workflows/building-with-nmake.yml @@ -29,7 +29,7 @@ jobs: steps: - run: choco install -y file - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: setup nmake run: | diff --git a/.github/workflows/building-with-pegof.yml b/.github/workflows/building-with-pegof.yml index d7f79693c7..d9a4059faf 100644 --- a/.github/workflows/building-with-pegof.yml +++ b/.github/workflows/building-with-pegof.yml @@ -23,9 +23,9 @@ jobs: - run: sudo apt -y install cmake g++ pkg-config automake libseccomp-dev libjansson-dev libyaml-dev libxml2-dev libpcre2-dev bash gdb python3-docutils # cmake and g++ are used to build pegof - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: repository: dolik-rce/pegof submodules: recursive diff --git a/.github/workflows/code-coverage-on-ubuntu.yml b/.github/workflows/code-coverage-on-ubuntu.yml index 0be2849ab9..d2321a2aed 100644 --- a/.github/workflows/code-coverage-on-ubuntu.yml +++ b/.github/workflows/code-coverage-on-ubuntu.yml @@ -17,7 +17,7 @@ jobs: CC: gcc steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 @@ -43,7 +43,7 @@ jobs: - run: cd build.d && lcov -c -b . -d . -o coverage.info - - uses: codecov/codecov-action@v5 + - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5 with: files: build.d/coverage.info name: travis-ubuntu-latest diff --git a/.github/workflows/cross-compile-for--netbsd-on-ubuntu.yml b/.github/workflows/cross-compile-for--netbsd-on-ubuntu.yml index d361ccb28f..811f79b553 100644 --- a/.github/workflows/cross-compile-for--netbsd-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for--netbsd-on-ubuntu.yml @@ -23,7 +23,7 @@ jobs: PKG_CONFIG_PATH: ${{ github.workspace }}/amd64-unknown-netbsd-3rdroot/lib/pkgconfig steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get -y update - run: sudo apt-get -y install clang cmake make automake autoconf pkg-config curl file diff --git a/.github/workflows/cross-compile-for-android-on-macos.yml b/.github/workflows/cross-compile-for-android-on-macos.yml index 3ede7a8b8d..37cbd540f7 100644 --- a/.github/workflows/cross-compile-for-android-on-macos.yml +++ b/.github/workflows/cross-compile-for-android-on-macos.yml @@ -16,7 +16,7 @@ jobs: runs-on: ${{ matrix.build-machine-os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: brew install make automake autoconf diff --git a/.github/workflows/cross-compile-for-android-on-ubuntu.yml b/.github/workflows/cross-compile-for-android-on-ubuntu.yml index d33f8bd7aa..7cd7c1e7e3 100644 --- a/.github/workflows/cross-compile-for-android-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for-android-on-ubuntu.yml @@ -16,7 +16,7 @@ jobs: runs-on: ${{ matrix.build-machine-os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get -y -o APT::Immediate-Configure=false update - run: sudo apt-get -y -o APT::Immediate-Configure=false install gcc make automake autoconf diff --git a/.github/workflows/cross-compile-for-freebsd-on-ubuntu.yml b/.github/workflows/cross-compile-for-freebsd-on-ubuntu.yml index 93689ee601..3c66ed271d 100644 --- a/.github/workflows/cross-compile-for-freebsd-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for-freebsd-on-ubuntu.yml @@ -23,7 +23,7 @@ jobs: PKG_CONFIG_PATH: ${{ github.workspace }}/amd64-unknown-freebsd-3rdroot/lib/pkgconfig steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get -y update - run: sudo apt-get -y install clang cmake make automake autoconf curl file diff --git a/.github/workflows/cross-compile-for-linux-on-ubuntu.yml b/.github/workflows/cross-compile-for-linux-on-ubuntu.yml index 8cf7f71f0a..773ba04bc2 100644 --- a/.github/workflows/cross-compile-for-linux-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for-linux-on-ubuntu.yml @@ -41,7 +41,7 @@ jobs: - run: sudo apt -y update - run: sudo apt -y install gcc gcc-${{ matrix.target-arch }}-linux-gnu automake autoconf pkg-config cmake make qemu-user - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: curl -LO https://archive.ubuntu.com/ubuntu/pool/universe/m/musl/musl_1.2.6.orig.tar.gz - run: install -d src/musl/ diff --git a/.github/workflows/cross-compile-for-openbsd-on-ubuntu.yml b/.github/workflows/cross-compile-for-openbsd-on-ubuntu.yml index 135c021f6a..11a25180e3 100644 --- a/.github/workflows/cross-compile-for-openbsd-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for-openbsd-on-ubuntu.yml @@ -23,7 +23,7 @@ jobs: PKG_CONFIG_PATH: ${{ github.workspace }}/amd64-unknown-openbsd-3rdroot/lib/pkgconfig steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get -y update - run: sudo apt-get -y install clang cmake make automake autoconf pkg-config curl file diff --git a/.github/workflows/cross-compile-for-windows-on-macos.yml b/.github/workflows/cross-compile-for-windows-on-macos.yml index 42ca3b8b17..c78d233584 100644 --- a/.github/workflows/cross-compile-for-windows-on-macos.yml +++ b/.github/workflows/cross-compile-for-windows-on-macos.yml @@ -17,7 +17,7 @@ jobs: runs-on: ${{ matrix.build-machine-os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: brew install mingw-w64 make automake autoconf file diff --git a/.github/workflows/cross-compile-for-windows-on-ubuntu.yml b/.github/workflows/cross-compile-for-windows-on-ubuntu.yml index 8814fa0915..d9ec6b5cab 100644 --- a/.github/workflows/cross-compile-for-windows-on-ubuntu.yml +++ b/.github/workflows/cross-compile-for-windows-on-ubuntu.yml @@ -17,7 +17,7 @@ jobs: runs-on: ${{ matrix.build-machine-os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get -y -o APT::Immediate-Configure=false update - run: sudo apt-get -y -o APT::Immediate-Configure=false install mingw-w64 gcc make automake autoconf file diff --git a/.github/workflows/run-citre-tests.yml b/.github/workflows/run-citre-tests.yml index 8b77fd4a4e..5bd08e17cd 100644 --- a/.github/workflows/run-citre-tests.yml +++ b/.github/workflows/run-citre-tests.yml @@ -21,7 +21,7 @@ jobs: READTAGS: '${{ github.workspace }}/readtags' steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: update package information run: sudo apt-get -y -o APT::Immediate-Configure=false update - name: install tools and libraries @@ -41,7 +41,7 @@ jobs: - name: install Emacs run: sudo apt-get -y -o APT::Immediate-Configure=false install emacs - name: checkout Citre repo - uses: actions/checkout@v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: repository: 'universal-ctags/citre' path: 'citre' diff --git a/.github/workflows/tagging.yml b/.github/workflows/tagging.yml index 27b16922a9..28db8c2b22 100644 --- a/.github/workflows/tagging.yml +++ b/.github/workflows/tagging.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 - run: misc/git-tag-maybe.sh diff --git a/.github/workflows/testing-on-alpine.yml b/.github/workflows/testing-on-alpine.yml index 909d30e405..ee543d8b8d 100644 --- a/.github/workflows/testing-on-alpine.yml +++ b/.github/workflows/testing-on-alpine.yml @@ -23,7 +23,7 @@ jobs: # this is to fix https://github.com/actions/checkout/issues/760 - run: git config --global --add safe.directory /__w/ctags/ctags - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: cc --version @@ -49,7 +49,7 @@ jobs: timeout-minutes: 45 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: | cat > run.sh <> ~/.bashrc diff --git a/.github/workflows/testing-on-freebsd.yml b/.github/workflows/testing-on-freebsd.yml index 10e7852b4a..ef55851283 100644 --- a/.github/workflows/testing-on-freebsd.yml +++ b/.github/workflows/testing-on-freebsd.yml @@ -16,9 +16,9 @@ jobs: freebsd-version: ['15.1', '15.0', '14.5', '14.4', '14.3', '14.2', '14.1', '14.0', '13.5', '13.4', '13.3', '13.2'] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - - uses: cross-platform-actions/action@master + - uses: cross-platform-actions/action@bf4a66308a77c42dd5fd50a7ee7c91d1fb33d4c6 # master with: operating_system: freebsd version: ${{ matrix.freebsd-version }} diff --git a/.github/workflows/testing-on-macos.yml b/.github/workflows/testing-on-macos.yml index d2a9e8fcc1..205e667922 100644 --- a/.github/workflows/testing-on-macos.yml +++ b/.github/workflows/testing-on-macos.yml @@ -16,7 +16,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 # temporarily disabled, because it always fails these days. #- run: brew update diff --git a/.github/workflows/testing-on-msys2.yml b/.github/workflows/testing-on-msys2.yml index 644ffcc48a..8f806c2397 100644 --- a/.github/workflows/testing-on-msys2.yml +++ b/.github/workflows/testing-on-msys2.yml @@ -20,7 +20,7 @@ jobs: shell: msys2 {0} steps: - - uses: msys2/setup-msys2@v2 + - uses: msys2/setup-msys2@ec48f7c5447b3140e2b088413ae3a55687bccb6e # v2.33.0 with: msystem: ${{ matrix.msystem }} update: true @@ -33,7 +33,7 @@ jobs: - run: git config --global core.autocrlf input shell: bash - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: ./autogen.sh - run: ./configure --prefix=/usr diff --git a/.github/workflows/testing-on-netbsd.yml b/.github/workflows/testing-on-netbsd.yml index f0bec6f50f..f8f2143572 100644 --- a/.github/workflows/testing-on-netbsd.yml +++ b/.github/workflows/testing-on-netbsd.yml @@ -16,9 +16,9 @@ jobs: netbsd-version: ['11.0', '10.1', '10.0'] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - - uses: cross-platform-actions/action@v1.6.0 + - uses: cross-platform-actions/action@e0b9770014ba65d5e0815f15b74031c3a635f641 # v1.6.0 with: operating_system: netbsd version: ${{ matrix.netbsd-version }} diff --git a/.github/workflows/testing-on-openbsd.yml b/.github/workflows/testing-on-openbsd.yml index e20975eb6e..07479e9bcc 100644 --- a/.github/workflows/testing-on-openbsd.yml +++ b/.github/workflows/testing-on-openbsd.yml @@ -16,9 +16,9 @@ jobs: openbsd-version: ['7.9', '7.8', '7.7', '7.6'] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - - uses: cross-platform-actions/action@master + - uses: cross-platform-actions/action@bf4a66308a77c42dd5fd50a7ee7c91d1fb33d4c6 # master with: operating_system: openbsd version: ${{ matrix.openbsd-version }} diff --git a/.github/workflows/testing-on-ubi.yml b/.github/workflows/testing-on-ubi.yml index cc38c94d4c..566559facf 100644 --- a/.github/workflows/testing-on-ubi.yml +++ b/.github/workflows/testing-on-ubi.yml @@ -23,7 +23,7 @@ jobs: # this is to fix https://github.com/actions/checkout/issues/760 - run: git config --global --add safe.directory /__w/ctags/ctags - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: cc --version diff --git a/.github/workflows/testing-on-ubuntu.yml b/.github/workflows/testing-on-ubuntu.yml index dc0b467dd0..124c8e8268 100644 --- a/.github/workflows/testing-on-ubuntu.yml +++ b/.github/workflows/testing-on-ubuntu.yml @@ -22,7 +22,7 @@ jobs: CC: ${{ matrix.compiler }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 diff --git a/.github/workflows/testing-with-valgrind.yml b/.github/workflows/testing-with-valgrind.yml index 33bbefb44d..e8c10e7c48 100644 --- a/.github/workflows/testing-with-valgrind.yml +++ b/.github/workflows/testing-with-valgrind.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - run: sudo apt-get update - run: sudo apt-get install valgrind pkg-config automake bash libjansson-dev libyaml-dev libseccomp-dev libxml2-dev libpcre2-dev gdb