@@ -17,12 +17,12 @@ jobs:
1717 name : Build
1818 runs-on : ubuntu-latest
1919 steps :
20- - uses : actions/checkout@v4
21- - uses : actions/setup-java@v4
20+ - uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
21+ - uses : actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
2222 with :
2323 distribution : ' zulu'
2424 java-version : ' 17'
25- - uses : gradle/actions/setup-gradle@v4
25+ - uses : gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
2626 with :
2727 cache-read-only : ${{ env.MAIN_BRANCH != 'true' }}
2828 - name : Build
@@ -42,19 +42,19 @@ jobs:
4242 ORG_GRADLE_PROJECT_signingInMemoryKey : ${{ secrets.SIGNING_KEY }}
4343 ORG_GRADLE_PROJECT_signingInMemoryKeyPassword : ${{ secrets.SIGNING_PASSWORD }}
4444 run : ./gradlew publishAllPublicationsToMavenCentralRepository -Psnapshot=true
45- - uses : github/codeql-action/upload-sarif@v3
45+ - uses : github/codeql-action/upload-sarif@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3
4646 if : success() || failure()
4747 with :
4848 sarif_file : build/lint-merged.sarif
4949 category : lint
50- - uses : github/codeql-action/upload-sarif@v3
50+ - uses : github/codeql-action/upload-sarif@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3
5151 if : success() || failure()
5252 with :
5353 sarif_file : build/detekt-merged.sarif
5454 category : detekt
5555 - name : Upload failure artifacts
5656 if : failure()
57- uses : actions/upload-artifact@v4
57+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
5858 with :
5959 name : reports
6060 path : |
@@ -65,12 +65,12 @@ jobs:
6565 name : Publication verification
6666 runs-on : ubuntu-latest
6767 steps :
68- - uses : actions/checkout@v4
69- - uses : actions/setup-java@v4
68+ - uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
69+ - uses : actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
7070 with :
7171 distribution : ' zulu'
7272 java-version : ' 17'
73- - uses : gradle/actions/setup-gradle@v4
73+ - uses : gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
7474 with :
7575 cache-read-only : ${{ env.MAIN_BRANCH != 'true' }}
7676 - name : Check publication setup
@@ -88,16 +88,16 @@ jobs:
8888 runs-on : macOS-latest
8989 timeout-minutes : 60
9090 steps :
91- - uses : actions/checkout@v4
92- - uses : actions/setup-java@v4
91+ - uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
92+ - uses : actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
9393 with :
9494 distribution : ' zulu'
9595 java-version : ' 17'
96- - uses : gradle/actions/setup-gradle@v4
96+ - uses : gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
9797 with :
9898 cache-read-only : ${{ env.MAIN_BRANCH != 'true' }}
9999 - name : Setup Android SDK
100- uses : android-actions/setup-android@v3
100+ uses : android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3
101101 - name : Package Debug Android Test
102102 # Flags from https://github.com/android/nowinandroid/blob/main/.github/workflows/Build.yaml
103103 run : ./gradlew packageDebugAndroidTest
@@ -113,7 +113,7 @@ jobs:
113113 -Dorg.gradle.jvmargs=-Xmx2048m
114114 - name : Upload failed instrumentation artifacts
115115 if : failure()
116- uses : actions/upload-artifact@v4
116+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
117117 with :
118118 name : instrumentation-failures
119119 path : |
@@ -125,16 +125,16 @@ jobs:
125125 runs-on : macOS-latest
126126 timeout-minutes : 60
127127 steps :
128- - uses : actions/checkout@v4
129- - uses : actions/setup-java@v4
128+ - uses : actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
129+ - uses : actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
130130 with :
131131 distribution : ' zulu'
132132 java-version : ' 17'
133- - uses : gradle/actions/setup-gradle@v4
133+ - uses : gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
134134 with :
135135 cache-read-only : ${{ env.MAIN_BRANCH != 'true' }}
136136 - name : Setup Android SDK
137- uses : android-actions/setup-android@v3
137+ uses : android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3
138138 - name : Screenshot tests
139139 # Flags from https://github.com/android/nowinandroid/blob/main/.github/workflows/Build.yaml
140140 run : >
@@ -146,7 +146,7 @@ jobs:
146146 -Pandroid.experimental.testOptions.managedDevices.emulator.showKernelLogging=true
147147 - name : Upload failed screenshot artifacts
148148 if : failure()
149- uses : actions/upload-artifact@v4
149+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
150150 with :
151151 name : screenshot-failures
152152 path : |
0 commit comments