From b4301cceca10e2f6d7afc3fa135f1f4935d82b51 Mon Sep 17 00:00:00 2001 From: Michal Krukowski Date: Thu, 11 Jun 2026 17:39:11 +0200 Subject: [PATCH] chore: redirect actions to freshaengineering, pin external actions to SHA --- .github/actions.lock.yaml | 18 +++++++++--------- .github/workflows/ci.yaml | 20 ++++++++++---------- .github/workflows/dev-publish.yaml | 4 ++-- 3 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/actions.lock.yaml b/.github/actions.lock.yaml index de02581..ea226bf 100644 --- a/.github/actions.lock.yaml +++ b/.github/actions.lock.yaml @@ -1,12 +1,12 @@ version: 1 -generated_at: 2026-05-25T15:53:48Z +generated_at: 2026-06-11T15:39:11Z internal: [] trusted: - action: actions/checkout refs: - - v4 + - 34e114876b0b11c390a56381ad16ebd13914f8d5 occurrences: - v4: + 34e114876b0b11c390a56381ad16ebd13914f8d5: .github/workflows/ci.yaml: - jobs.static.steps.[0].uses - jobs.test.steps.[0].uses @@ -17,9 +17,9 @@ trusted: - jobs.dev-publish.steps.[0].uses - action: runs-on/cache refs: - - v4 + - a5f51d6f3fece787d03b7b4e981c82538a0654ed occurrences: - v4: + a5f51d6f3fece787d03b7b4e981c82538a0654ed: .github/workflows/ci.yaml: - jobs.static.steps.[4].uses - jobs.static.steps.[6].uses @@ -27,16 +27,16 @@ trusted: - jobs.test.steps.[6].uses - action: runs-on/cache/restore refs: - - v4 + - a5f51d6f3fece787d03b7b4e981c82538a0654ed occurrences: - v4: + a5f51d6f3fece787d03b7b4e981c82538a0654ed: .github/workflows/dev-publish.yaml: - jobs.dev-publish.steps.[2].uses - action: runs-on/cache/save refs: - - v4 + - a5f51d6f3fece787d03b7b4e981c82538a0654ed occurrences: - v4: + a5f51d6f3fece787d03b7b4e981c82538a0654ed: .github/workflows/ci.yaml: - jobs.permit.steps.[3].uses external: diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index c070e1d..02d68f9 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -35,7 +35,7 @@ jobs: runner-os: [ubuntu20] steps: - name: Checkout latest codebase - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: ref: ${{ env.SHA }} clean: false @@ -58,7 +58,7 @@ jobs: echo "HASH=$HASH" >> $GITHUB_OUTPUT - name: Hex auth run: mix hex.organization auth fresha --key ${{ secrets.HEX_ORGANIZATION_WRITE_KEY }} - - uses: runs-on/cache@v4 + - uses: runs-on/cache@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 id: deps-cache with: path: | @@ -73,7 +73,7 @@ jobs: echo "Installing dependencies" mix deps.get mix deps.compile - - uses: runs-on/cache@v4 + - uses: runs-on/cache@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 id: build-cache with: path: '**/*' @@ -104,7 +104,7 @@ jobs: runner-os: [ubuntu20] steps: - name: Checkout latest codebase - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: ref: ${{ env.SHA }} clean: false @@ -127,7 +127,7 @@ jobs: echo "HASH=$HASH" >> $GITHUB_OUTPUT - name: Hex auth run: mix hex.organization auth fresha --key ${{ secrets.HEX_ORGANIZATION_WRITE_KEY }} - - uses: runs-on/cache@v4 + - uses: runs-on/cache@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 id: deps-cache with: path: | @@ -142,7 +142,7 @@ jobs: echo "Installing dependencies" mix deps.get mix deps.compile - - uses: runs-on/cache@v4 + - uses: runs-on/cache@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 id: build-cache with: path: '**/*' @@ -166,7 +166,7 @@ jobs: PUBLISH: ${{ steps.version.outputs.PUBLISH }} steps: - name: Checkout latest codebase - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: fetch-depth: 2 ref: ${{ env.SHA }} @@ -203,7 +203,7 @@ jobs: echo "" echo "===============================================" - name: Cache Approval File - uses: runs-on/cache/save@v4 + uses: runs-on/cache/save@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 with: path: approval.txt key: ${{ runner.os }}-${{ env.REPOSITORY }}-approval-${{ needs.static.outputs.HASH }} @@ -214,7 +214,7 @@ jobs: if: needs.permit.outputs.PUBLISH == 'true' && github.event_name == 'push' steps: - name: Checkout latest codebase - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: ref: ${{ env.SHA }} clean: false @@ -248,7 +248,7 @@ jobs: container: image: elixir:1.13-slim steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Install Dependencies run: | mix local.rebar --force diff --git a/.github/workflows/dev-publish.yaml b/.github/workflows/dev-publish.yaml index 4265647..59965d2 100644 --- a/.github/workflows/dev-publish.yaml +++ b/.github/workflows/dev-publish.yaml @@ -21,7 +21,7 @@ jobs: runs-on: "runs-on/runner=4cpu-linux-x64/run-id=${{ github.run_id }}" steps: - name: Checkout latest codebase - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 with: ref: ${{ env.sha }} clean: false @@ -38,7 +38,7 @@ jobs: echo "APPROVAL PRODUCED BY SUCCESSFULL CHECKS EXECUTION WILL LAND IN CACHE" echo "HASH=$HASH" >> $GITHUB_OUTPUT - name: Check for CI successes - uses: runs-on/cache/restore@v4 + uses: runs-on/cache/restore@a5f51d6f3fece787d03b7b4e981c82538a0654ed # v4 with: key: ${{ runner.os }}-${{ env.REPOSITORY }}-approval-${{ steps.hash.outputs.HASH }} path: approval.txt