@@ -41,15 +41,17 @@ jobs:
4141
4242 steps :
4343 - name : Cancel Previous Runs
44- uses : styfle/cancel-workflow-action@0.12.1
44+ uses : styfle/cancel-workflow-action@85880fa0301c86cca9da44039ee3bb12d3bedbfa # 0.12.1
4545 with :
4646 access_token : ${{ secrets.GITHUB_TOKEN }}
4747
4848 - name : Repo Checkout
49- uses : actions/checkout@v4
49+ uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
50+ with :
51+ persist-credentials : false
5052
5153 - name : Install Go ${{ matrix.go-version }}
52- uses : actions/setup-go@v5
54+ uses : actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
5355 with :
5456 go-version : ${{ matrix.go-version }}
5557
6466
6567 - name : Upload Go unit test results
6668 if : ${{ always() }}
67- uses : actions/upload-artifact@v4
69+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
6870 with :
6971 name : ${{ env.JUNIT_ARTIFACT_DIR }}-${{ matrix.os }}-${{ matrix.go-version }}
7072 path : ${{ env.JUNIT_OUTPUT_DIR }}
@@ -110,25 +112,27 @@ jobs:
110112 # looker: '7_20'
111113 steps :
112114 - name : Repo Checkout
113- uses : actions/checkout@v4
115+ uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
116+ with :
117+ persist-credentials : false
114118
115119 - name : Authenticate to Google Cloud
116- uses : google-github-actions/auth@v2
120+ uses : google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
117121 with :
118122 credentials_json : ${{ secrets.GCP_AR_READER_SA_KEY }}
119123 project_id : ${{ secrets.GCP_PROJECT_ID }}
120124 create_credentials_file : true
121125 export_environment_variables : true
122126
123127 - name : Set up Cloud SDK
124- uses : google-github-actions/setup-gcloud@v2
128+ uses : google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f # v2
125129
126130 - name : Authenticate Artifact Repository
127131 run : gcloud auth configure-docker us-west1-docker.pkg.dev --quiet
128132
129133 - name : Install docker on macos
130134 if : ${{ matrix.os == 'macos' }}
131- uses : docker-practice/actions-setup-docker@v1
135+ uses : docker-practice/actions-setup-docker@fd7ecdac7caf8e2c541a48c9bcc280aae59a8461 # v1
132136 with :
133137 docker_channel : stable
134138 docker_buildx : false
@@ -162,7 +166,7 @@ jobs:
162166 MATRIX_LOOKER : ${{ matrix.looker }}
163167
164168 - name : Install Go ${{ matrix.go-version }}
165- uses : actions/setup-go@v5
169+ uses : actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
166170 with :
167171 go-version : 1.23.0
168172 check-latest : true
@@ -182,7 +186,7 @@ jobs:
182186
183187 - name : Upload Go unit test results
184188 if : ${{ always() }}
185- uses : actions/upload-artifact@v4
189+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
186190 with :
187191 name : ${{ env.JUNIT_ARTIFACT_DIR }}-${{ matrix.os }}-${{ matrix.looker }}
188192 path : ${{ env.JUNIT_OUTPUT_DIR }}
@@ -198,12 +202,12 @@ jobs:
198202
199203 steps :
200204 - name : Download Artifacts
201- uses : actions/download-artifact@v4
205+ uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
202206 with :
203207 path : artifacts
204208
205209 - name : Publish All Test Results
206- uses : EnricoMi/publish-unit-test-result-action@v2
210+ uses : EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
207211 with :
208212 # Cosmetic issue with `check_name` being associated to the wrong
209213 # workflow: https://github.com/EnricoMi/publish-unit-test-result-action/issues/12
0 commit comments