Skip to content

Commit dcea19b

Browse files
fixes for binary, fixes for zizmor, black reformats
1 parent a6cfb23 commit dcea19b

55 files changed

Lines changed: 6522 additions & 6880 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/apix-ci.yml‎

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,17 @@ jobs:
4848

4949
steps:
5050
- name: Cancel Previous Runs
51-
uses: styfle/cancel-workflow-action@0.12.1
51+
uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
5252
with:
5353
access_token: ${{ secrets.GITHUB_TOKEN }}
5454

5555
- name: Repo Checkout
56-
uses: actions/checkout@v4
56+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
57+
with:
58+
persist-credentials: false
5759

5860
- name: Install Node ${{ matrix.node-version }}
59-
uses: actions/setup-node@v4
61+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
6062
with:
6163
node-version: ${{ matrix.node-version }}
6264

@@ -90,7 +92,7 @@ jobs:
9092

9193
- name: Upload ts unit test results
9294
if: ${{ always() }}
93-
uses: actions/upload-artifact@v4
95+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
9496
with:
9597
name: apix-test-results
9698
path: results/apix-${{ matrix.os }}-${{ matrix.node-version }}
@@ -106,12 +108,12 @@ jobs:
106108

107109
steps:
108110
- name: Download Artifacts
109-
uses: actions/download-artifact@v4
111+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
110112
with:
111113
path: artifacts
112114

113115
- name: Publish Unit Test Results
114-
uses: EnricoMi/publish-unit-test-result-action@v2
116+
uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
115117
with:
116118
# Cosmetic issue with `check_name` being associated to the wrong
117119
# workflow: https://github.com/EnricoMi/publish-unit-test-result-action/issues/12

‎.github/workflows/codegen-ci.yml‎

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -43,23 +43,25 @@ jobs:
4343

4444
steps:
4545
- name: Repo Checkout
46-
uses: actions/checkout@v4
46+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
47+
with:
48+
persist-credentials: false
4749

4850
- name: Cancel Previous Runs
49-
uses: styfle/cancel-workflow-action@0.12.1
51+
uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
5052
with:
5153
access_token: ${{ secrets.GITHUB_TOKEN }}
5254

5355
- name: Authenticate to Google Cloud
54-
uses: google-github-actions/auth@v2
56+
uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
5557
with:
5658
credentials_json: ${{ secrets.GCP_AR_READER_SA_KEY }}
5759
project_id: ${{ secrets.GCP_PROJECT_ID }}
5860
create_credentials_file: true
5961
export_environment_variables: true
6062

6163
- name: Set up Cloud SDK
62-
uses: google-github-actions/setup-gcloud@v2
64+
uses: google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f # v2
6365

6466
- name: Authenticate Artifact Repository
6567
run: gcloud auth configure-docker us-west1-docker.pkg.dev --quiet
@@ -73,7 +75,7 @@ jobs:
7375
docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
7476
docker logs -f looker-sdk-codegen-ci --until=30s &
7577
76-
- uses: actions/setup-node@v4
78+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
7779
with:
7880
node-version: 22.x
7981

@@ -123,7 +125,7 @@ jobs:
123125

124126
- name: Upload ts unit test results
125127
if: ${{ always() }}
126-
uses: actions/upload-artifact@v4
128+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
127129
with:
128130
name: sdk-codegen-test-results
129131
path: results/sdk-codegen
@@ -139,12 +141,12 @@ jobs:
139141

140142
steps:
141143
- name: Download Artifacts
142-
uses: actions/download-artifact@v4
144+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
143145
with:
144146
path: artifacts
145147

146148
- name: Publish Unit Test Results
147-
uses: EnricoMi/publish-unit-test-result-action@v2
149+
uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
148150
with:
149151
# Cosmetic issue with `check_name` being associated to the wrong
150152
# workflow: https://github.com/EnricoMi/publish-unit-test-result-action/issues/12

‎.github/workflows/go-ci.yml‎

Lines changed: 16 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -41,15 +41,17 @@ jobs:
4141

4242
steps:
4343
- name: Cancel Previous Runs
44-
uses: styfle/cancel-workflow-action@0.12.1
44+
uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
4545
with:
4646
access_token: ${{ secrets.GITHUB_TOKEN }}
4747

4848
- name: Repo Checkout
49-
uses: actions/checkout@v4
49+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
50+
with:
51+
persist-credentials: false
5052

5153
- name: Install Go ${{ matrix.go-version }}
52-
uses: actions/setup-go@v5
54+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
5355
with:
5456
go-version: ${{ matrix.go-version }}
5557

@@ -64,7 +66,7 @@ jobs:
6466
6567
- name: Upload Go unit test results
6668
if: ${{ always() }}
67-
uses: actions/upload-artifact@v4
69+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
6870
with:
6971
name: ${{ env.JUNIT_ARTIFACT_DIR }}-${{ matrix.os }}-${{ matrix.go-version }}
7072
path: ${{ env.JUNIT_OUTPUT_DIR }}
@@ -110,25 +112,27 @@ jobs:
110112
# looker: '7_20'
111113
steps:
112114
- name: Repo Checkout
113-
uses: actions/checkout@v4
115+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
116+
with:
117+
persist-credentials: false
114118

115119
- name: Authenticate to Google Cloud
116-
uses: google-github-actions/auth@v2
120+
uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
117121
with:
118122
credentials_json: ${{ secrets.GCP_AR_READER_SA_KEY }}
119123
project_id: ${{ secrets.GCP_PROJECT_ID }}
120124
create_credentials_file: true
121125
export_environment_variables: true
122126

123127
- name: Set up Cloud SDK
124-
uses: google-github-actions/setup-gcloud@v2
128+
uses: google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f # v2
125129

126130
- name: Authenticate Artifact Repository
127131
run: gcloud auth configure-docker us-west1-docker.pkg.dev --quiet
128132

129133
- name: Install docker on macos
130134
if: ${{ matrix.os == 'macos' }}
131-
uses: docker-practice/actions-setup-docker@v1
135+
uses: docker-practice/actions-setup-docker@fd7ecdac7caf8e2c541a48c9bcc280aae59a8461 # v1
132136
with:
133137
docker_channel: stable
134138
docker_buildx: false
@@ -162,7 +166,7 @@ jobs:
162166
MATRIX_LOOKER: ${{ matrix.looker }}
163167

164168
- name: Install Go ${{ matrix.go-version }}
165-
uses: actions/setup-go@v5
169+
uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
166170
with:
167171
go-version: 1.23.0
168172
check-latest: true
@@ -182,7 +186,7 @@ jobs:
182186
183187
- name: Upload Go unit test results
184188
if: ${{ always() }}
185-
uses: actions/upload-artifact@v4
189+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
186190
with:
187191
name: ${{ env.JUNIT_ARTIFACT_DIR }}-${{ matrix.os }}-${{ matrix.looker }}
188192
path: ${{ env.JUNIT_OUTPUT_DIR }}
@@ -198,12 +202,12 @@ jobs:
198202

199203
steps:
200204
- name: Download Artifacts
201-
uses: actions/download-artifact@v4
205+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
202206
with:
203207
path: artifacts
204208

205209
- name: Publish All Test Results
206-
uses: EnricoMi/publish-unit-test-result-action@v2
210+
uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
207211
with:
208212
# Cosmetic issue with `check_name` being associated to the wrong
209213
# workflow: https://github.com/EnricoMi/publish-unit-test-result-action/issues/12

‎.github/workflows/hackathon-ci.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,15 +42,17 @@ jobs:
4242

4343
steps:
4444
- name: Cancel Previous Runs
45-
uses: styfle/cancel-workflow-action@0.12.1
45+
uses: styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
4646
with:
4747
access_token: ${{ secrets.GITHUB_TOKEN }}
4848

4949
- name: Repo Checkout
50-
uses: actions/checkout@v4
50+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
51+
with:
52+
persist-credentials: false
5153

5254
- name: Install Node ${{ matrix.node-version }}
53-
uses: actions/setup-node@v4
55+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
5456
with:
5557
node-version: ${{ matrix.node-version }}
5658

‎.github/workflows/kotlin-ci.yml‎

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,11 @@ jobs:
3131
contents: read
3232

3333
steps:
34-
- uses: actions/checkout@v4
34+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
35+
with:
36+
persist-credentials: false
3537
- name: Set up JDK 17
36-
uses: actions/setup-java@v4
38+
uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
3739
with:
3840
java-version: '17'
3941
distribution: 'temurin'
@@ -50,9 +52,11 @@ jobs:
5052
contents: write
5153

5254
steps:
53-
- uses: actions/checkout@v4
55+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
56+
with:
57+
persist-credentials: false
5458
- name: Set up JDK 17
55-
uses: actions/setup-java@v4
59+
uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
5660
with:
5761
java-version: '17'
5862
distribution: 'temurin'

‎.github/workflows/lerna-publish.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -25,21 +25,21 @@ jobs:
2525
LOOKERSDK_CLIENT_SECRET: ${{ secrets.LOOKERSDK_CLIENT_SECRET }}
2626
steps:
2727
- name: Clone repository
28-
uses: actions/checkout@v4
28+
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
2929
with:
3030
persist-credentials: false
3131
ref: ${{ github.event.release.tag_name || github.event.inputs.ref }}
3232

3333
- name: Authenticate to Google Cloud
34-
uses: google-github-actions/auth@v2
34+
uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
3535
with:
3636
credentials_json: ${{ secrets.GCP_AR_READER_SA_KEY }}
3737
project_id: ${{ secrets.GCP_PROJECT_ID }}
3838
create_credentials_file: true
3939
export_environment_variables: true
4040

4141
- name: Set up Cloud SDK
42-
uses: google-github-actions/setup-gcloud@v2
42+
uses: google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f # v2
4343

4444
- name: Authenticate Artifact Repository
4545
run: gcloud auth configure-docker us-west1-docker.pkg.dev --quiet
@@ -50,7 +50,7 @@ jobs:
5050
docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
5151
docker logs -f looker-sdk-codegen-ci --until=30s &
5252
53-
- uses: actions/setup-node@v4
53+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
5454
with:
5555
node-version: 22.x
5656
registry-url: https://wombat-dressing-room.appspot.com

‎.github/workflows/p3-issue-label.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
permissions:
1111
issues: write
1212
steps:
13-
- uses: actions/github-script@v6
13+
- uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
1414
with:
1515
script: |
1616
github.rest.issues.addLabels({

0 commit comments

Comments
 (0)