Skip to content

Commit 2b6698f

Browse files
riccardosarrocursoragent
riccardosarro
and
cursoragent
committed
fix: pin GitHub Actions to SHA for supply chain security
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
1 parent ca15124 commit 2b6698f

9 files changed

Lines changed: 36 additions & 36 deletions

File tree

‎.github/workflows/bcc.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@ jobs:
77
runs-on: ubuntu-latest
88
steps:
99
- name: Set up PHP
10-
uses: shivammathur/setup-php@v2
10+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
1111
with:
1212
php-version: '8.1'
1313
tools: composer:v2
1414
coverage: none
1515
env:
1616
fail-fast: true
1717

18-
- uses: actions/checkout@v6
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1919
with:
2020
fetch-depth: 0
2121

@@ -30,7 +30,7 @@ jobs:
3030
composer update --no-install
3131
3232
- name: Cache composer cache
33-
uses: actions/cache@v5
33+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
3434
with:
3535
path: |
3636
${{ steps.composer-cache.outputs.files_cache }}

‎.github/workflows/build-docker.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
should_skip: ${{ steps.skip_check.outputs.should_skip }}
2525
steps:
2626
- id: skip_check
27-
uses: fkirc/skip-duplicate-actions@v5.3.1
27+
uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
2828
with:
2929
cancel_others: true
3030
skip_after_successful_duplicate: false
@@ -45,15 +45,15 @@ jobs:
4545
- ubuntu-24.04-arm
4646
steps:
4747
- name: Set up PHP
48-
uses: shivammathur/setup-php@v2
48+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
4949
with:
5050
php-version: '8.1'
5151
tools: composer:v2
5252
coverage: none
5353
env:
5454
fail-fast: true
5555

56-
- uses: actions/checkout@v6
56+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5757
with:
5858
fetch-depth: 0 # required for composer to automatically detect root package version
5959

@@ -68,7 +68,7 @@ jobs:
6868
composer update --no-install
6969
7070
- name: Cache composer cache
71-
uses: actions/cache@v5
71+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
7272
with:
7373
path: |
7474
${{ steps.composer-cache.outputs.files_cache }}
@@ -86,7 +86,7 @@ jobs:
8686
# https://github.com/docker/setup-buildx-action
8787
- name: Set up Docker Buildx
8888
id: buildx
89-
uses: docker/setup-buildx-action@v4
89+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
9090

9191
- name: Upload docker image
9292
env:
@@ -106,18 +106,18 @@ jobs:
106106
steps:
107107
- name: Set up Docker Buildx
108108
id: buildx
109-
uses: docker/setup-buildx-action@v4
109+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
110110

111111
- name: Set up PHP
112-
uses: shivammathur/setup-php@v2
112+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
113113
with:
114114
php-version: '8.1'
115115
tools: composer:v2
116116
coverage: none
117117
env:
118118
fail-fast: true
119119

120-
- uses: actions/checkout@v6
120+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
121121

122122
- name: Upload final docker image
123123
env:

‎.github/workflows/build-phar.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
should_skip: ${{ steps.skip_check.outputs.should_skip }}
2222
steps:
2323
- id: skip_check
24-
uses: fkirc/skip-duplicate-actions@v5.3.1
24+
uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
2525
with:
2626
concurrent_skipping: always
2727
cancel_others: true
@@ -37,15 +37,15 @@ jobs:
3737
runs-on: ubuntu-latest
3838
steps:
3939
- name: Set up PHP
40-
uses: shivammathur/setup-php@v2
40+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
4141
with:
4242
php-version: '8.2'
4343
tools: composer:v2
4444
coverage: none
4545
env:
4646
fail-fast: true
4747

48-
- uses: actions/checkout@v6
48+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4949
with:
5050
fetch-depth: 0 # required for composer to automatically detect root package version
5151

@@ -60,7 +60,7 @@ jobs:
6060
composer update --no-install
6161
6262
- name: Cache composer cache
63-
uses: actions/cache@v5
63+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
6464
with:
6565
path: |
6666
${{ steps.composer-cache.outputs.files_cache }}
@@ -83,7 +83,7 @@ jobs:
8383

8484
- name: Upload release assets
8585
if: ${{ github.event_name == 'release' }}
86-
uses: svenstaro/upload-release-action@v2
86+
uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # v2
8787
with:
8888
repo_token: ${{ secrets.GITHUB_TOKEN }}
8989
file: build/psalm.phar*

‎.github/workflows/build-stubs.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
should_skip: ${{ steps.skip_check.outputs.should_skip }}
2323
steps:
2424
- id: skip_check
25-
uses: fkirc/skip-duplicate-actions@v5.3.1
25+
uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
2626
with:
2727
cancel_others: true
2828
do_not_skip: '["release"]'
@@ -34,11 +34,11 @@ jobs:
3434
if: ${{ needs.pre_job.outputs.should_skip != 'true' }}
3535
runs-on: ubuntu-latest
3636
steps:
37-
- uses: actions/checkout@v6
37+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3838

3939
- name: Set up Docker Buildx
4040
id: buildx
41-
uses: docker/setup-buildx-action@v4
41+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
4242

4343
- name: Upload docker image
4444
env:

‎.github/workflows/ci.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,15 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Set up PHP
13-
uses: shivammathur/setup-php@v2
13+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
1414
with:
1515
php-version: '8.1'
1616
tools: composer:v2
1717
coverage: none
1818
env:
1919
fail-fast: true
2020

21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2222

2323
- name: Get Composer Cache Directories
2424
id: composer-cache
@@ -39,7 +39,7 @@ jobs:
3939
COMPOSER_ROOT_VERSION: dev-master
4040

4141
- name: Cache composer cache
42-
uses: actions/cache@v5
42+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
4343
with:
4444
path: |
4545
${{ steps.composer-cache.outputs.files_cache }}
@@ -61,15 +61,15 @@ jobs:
6161
runs-on: ubuntu-latest
6262
steps:
6363
- name: Set up PHP
64-
uses: shivammathur/setup-php@v2
64+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
6565
with:
6666
php-version: '8.1'
6767
tools: composer:v2
6868
coverage: none
6969
env:
7070
fail-fast: true
7171

72-
- uses: actions/checkout@v6
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7373

7474
- name: Get Composer Cache Directories
7575
id: composer-cache
@@ -83,7 +83,7 @@ jobs:
8383
COMPOSER_ROOT_VERSION: dev-master
8484

8585
- name: Cache composer cache
86-
uses: actions/cache@v5
86+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
8787
with:
8888
path: |
8989
${{ steps.composer-cache.outputs.files_cache }}
@@ -147,7 +147,7 @@ jobs:
147147

148148
steps:
149149
- name: Set up PHP
150-
uses: shivammathur/setup-php@v2
150+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
151151
with:
152152
php-version: "${{ matrix.php-version }}"
153153
ini-values: zend.assertions=1, assert.exception=1
@@ -158,7 +158,7 @@ jobs:
158158
env:
159159
fail-fast: true
160160

161-
- uses: actions/checkout@v6
161+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
162162

163163
- name: Get Composer Cache Directories
164164
id: composer-cache
@@ -173,7 +173,7 @@ jobs:
173173
COMPOSER_ROOT_VERSION: dev-master
174174

175175
- name: Cache composer cache
176-
uses: actions/cache@v5
176+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
177177
with:
178178
path: |
179179
${{ steps.composer-cache.outputs.files_cache }}

‎.github/workflows/macos-scan.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ jobs:
1010
runs-on: macos-15
1111

1212
steps:
13-
- uses: actions/checkout@v6
14-
- uses: shivammathur/setup-php@v2
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
14+
- uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
1515
with:
1616
php-version: '8.5'
1717
ini-values: zend.assertions=1, assert.exception=1, opcache.enable_cli=1, opcache.jit=off

‎.github/workflows/pr-labels.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ jobs:
66
label:
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: mheap/github-action-required-labels@v5
9+
- uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe # v5
1010
with:
1111
mode: minimum
1212
count: 1

‎.github/workflows/shepherd.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ jobs:
1010
runs-on: ubuntu-latest
1111

1212
steps:
13-
- uses: actions/checkout@v6
14-
- uses: shivammathur/setup-php@v2
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
14+
- uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
1515
with:
1616
php-version: '8.5'
1717
ini-values: zend.assertions=1, assert.exception=1, opcache.enable_cli=1, opcache.jit=off

‎.github/workflows/windows-ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
git config --global core.eol lf
5353
5454
- name: Set up PHP
55-
uses: shivammathur/setup-php@v2
55+
uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
5656
with:
5757
php-version: '8.5'
5858
#ini-values: zend.assertions=1, assert.exception=1, opcache.enable_cli=1, opcache.jit=function, opcache.jit_buffer_size=512M
@@ -69,7 +69,7 @@ jobs:
6969
php -v
7070
php -r 'var_dump(PHP_VERSION_ID);'
7171
72-
- uses: actions/checkout@v6
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7373

7474
- name: Get Composer Cache Directories
7575
id: composer-cache
@@ -85,7 +85,7 @@ jobs:
8585
COMPOSER_ROOT_VERSION: dev-master
8686

8787
- name: Cache composer cache
88-
uses: actions/cache@v5
88+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
8989
with:
9090
path: |
9191
${{ steps.composer-cache.outputs.files_cache }}

0 commit comments

Comments
 (0)