From c4cf73a819cfa6242c4444983d7aa31d16cd2e1e Mon Sep 17 00:00:00 2001 From: Yibo Zhuang Date: Tue, 1 Sep 2026 17:41:44 -0700 Subject: [PATCH] Pin CI and build actions to full commit SHAs (#1325) --- .github/workflows/build.yml | 4 ++-- .github/workflows/ci.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 0d1d002..987e102 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -12,7 +12,7 @@ jobs: runs-on: xcode-27 timeout-minutes: 30 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Build run: | export COMPILATION_CACHE_ENABLE_CACHING=YES @@ -32,6 +32,6 @@ jobs: runs-on: xcode-27 timeout-minutes: 30 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Build run: swift build --build-system swiftbuild --product tart diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2b77304..7f7cc81 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,8 +17,8 @@ jobs: runs-on: xcode-27 timeout-minutes: 60 steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version-file: integration-tests/go.mod cache-dependency-path: integration-tests/go.sum