this repo has no description
ci: pin all GitHub Actions to commit SHAs
+21
-20
+2
-2
.github/workflows/codeberg-mirror.yml
+2
-2
.github/workflows/codeberg-mirror.yml
···
8
8
codeberg:
9
9
runs-on: ubuntu-latest
10
10
steps:
11
-
- uses: actions/checkout@v4
11
+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
12
12
with:
13
13
fetch-depth: 0
14
-
- uses: yesolutions/mirror-action@master
14
+
- uses: yesolutions/mirror-action@662fce0eced8996f64d7fa264d76cddd84827f33 # master
15
15
with:
16
16
REMOTE: git@codeberg.org:arcuru/cmprss.git
17
17
GIT_SSH_PRIVATE_KEY: ${{ secrets.GIT_SSH_PRIVATE_KEY }}
+10
-10
.github/workflows/nix.yml
+10
-10
.github/workflows/nix.yml
···
12
12
runs-on: ubuntu-latest
13
13
steps:
14
14
- name: Checkout
15
-
uses: actions/checkout@v4
15
+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
16
16
- name: Install Nix
17
-
uses: DeterminateSystems/nix-installer-action@v12
17
+
uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
18
18
- name: Nix Cache
19
-
uses: DeterminateSystems/magic-nix-cache-action@v7
19
+
uses: DeterminateSystems/magic-nix-cache-action@b46e247b898aa56e6d2d2e728dc6df6c84fdb738 # v7
20
20
21
21
- name: Format
22
22
run: nix build .#fmt
···
47
47
arch: aarch64
48
48
steps:
49
49
- name: Checkout
50
-
uses: actions/checkout@v4
50
+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
51
51
- name: Install Nix
52
-
uses: DeterminateSystems/nix-installer-action@v12
52
+
uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
53
53
- name: Nix Cache
54
-
uses: DeterminateSystems/magic-nix-cache-action@v7
54
+
uses: DeterminateSystems/magic-nix-cache-action@b46e247b898aa56e6d2d2e728dc6df6c84fdb738 # v7
55
55
56
56
- name: Test
57
57
run: nix build .#test
···
75
75
needs: build
76
76
steps:
77
77
- name: Checkout
78
-
uses: actions/checkout@v4
78
+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
79
79
- name: Install Nix
80
-
uses: DeterminateSystems/nix-installer-action@v12
80
+
uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
81
81
- name: Nix Cache
82
-
uses: DeterminateSystems/magic-nix-cache-action@v7
82
+
uses: DeterminateSystems/magic-nix-cache-action@b46e247b898aa56e6d2d2e728dc6df6c84fdb738 # v7
83
83
84
84
- name: Build Coverage
85
85
# Build and ensure the output is linked in result/
···
87
87
88
88
# Upload code coverage
89
89
- name: Upload coverage to Codecov
90
-
uses: codecov/codecov-action@v4
90
+
uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
91
91
with:
92
92
token: ${{ secrets.CODECOV_TOKEN }}
93
93
file: ./result/lcov.info
+2
-2
.github/workflows/publish.yml
+2
-2
.github/workflows/publish.yml
···
127
127
ref: ${{ steps.tag.outputs.tag }}
128
128
129
129
- name: Install Nix
130
-
uses: DeterminateSystems/nix-installer-action@v12
130
+
uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
131
131
132
132
- name: Nix Cache
133
-
uses: DeterminateSystems/magic-nix-cache-action@v7
133
+
uses: DeterminateSystems/magic-nix-cache-action@b46e247b898aa56e6d2d2e728dc6df6c84fdb738 # v7
134
134
135
135
- name: Build static binary
136
136
run: nix build -L .#cmprss-static
+4
-3
.github/workflows/rust.yml
+4
-3
.github/workflows/rust.yml
···
16
16
17
17
steps:
18
18
- name: Checkout
19
-
uses: actions/checkout@v4
19
+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
20
20
21
21
- name: Install Rust
22
-
uses: dtolnay/rust-toolchain@stable
22
+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
23
23
with:
24
+
toolchain: stable
24
25
components: clippy, rustfmt
25
26
26
27
- name: Rust Cache
27
-
uses: Swatinem/rust-cache@v2
28
+
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
28
29
29
30
- name: Build
30
31
run: cargo build
+3
-3
.github/workflows/security-audit.yml
+3
-3
.github/workflows/security-audit.yml
···
23
23
contents: read
24
24
steps:
25
25
- name: Checkout
26
-
uses: actions/checkout@v4
26
+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
27
27
28
28
- name: Install Nix
29
-
uses: DeterminateSystems/nix-installer-action@v12
29
+
uses: DeterminateSystems/nix-installer-action@7993355175c2765e5733dae74f3e0786fe0e5c4f # v12
30
30
31
31
- name: Nix Cache
32
-
uses: DeterminateSystems/magic-nix-cache-action@v7
32
+
uses: DeterminateSystems/magic-nix-cache-action@b46e247b898aa56e6d2d2e728dc6df6c84fdb738 # v7
33
33
34
34
- name: Check advisories
35
35
id: audit