Skip to content

Commit b9542af

Browse files
Copilotmihaic
andauthored
Use commit hashes for actions/checkout references (#229)
Updated all `actions/checkout` action references to use commit hashes instead of version tags for improved security and reproducibility. ## Changes - Replaced `actions/checkout@v6` with `actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0` in: - `.github/workflows/cibuildwheel.yml` - `.github/workflows/build-linux-arm.yml` - `.github/workflows/build-linux.yml` - `.github/workflows/build-macos.yaml` - `.github/workflows/pre-commit.yml` This aligns all workflow files with the existing pattern in `.github/workflows/skywalking-eyes.yml` and prevents potential tag hijacking attacks. <!-- START COPILOT CODING AGENT TIPS --> --- ✨ Let Copilot coding agent [set things up for you](https://github.com/intel/ScalableVectorSearch/issues/new?title=✨+Set+up+Copilot+instructions&body=Configure%20instructions%20for%20this%20repository%20as%20documented%20in%20%5BBest%20practices%20for%20Copilot%20coding%20agent%20in%20your%20repository%5D%28https://gh.io/copilot-coding-agent-tips%29%2E%0A%0A%3COnboard%20this%20repo%3E&assignees=copilot) — coding agent works faster and does higher quality work when set up for your repo. --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: mihaic <[email protected]>
1 parent 3c859a5 commit b9542af

File tree

5 files changed

+5
-5
lines changed

5 files changed

+5
-5
lines changed

.github/workflows/build-linux-arm.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
cc: clang-15
4646

4747
steps:
48-
- uses: actions/checkout@v6
48+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
4949

5050
- name: Configure build
5151
working-directory: ${{ runner.temp }}

.github/workflows/build-linux.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
ivf: ON
5050

5151
steps:
52-
- uses: actions/checkout@v6
52+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
5353
- name: Install MKL
5454
timeout-minutes: 5
5555
run: |

.github/workflows/build-macos.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
needs_prefix: true
4545

4646
steps:
47-
- uses: actions/checkout@v6
47+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
4848

4949
- name: Install Compiler
5050
run: |

.github/workflows/cibuildwheel.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-22.04
3434

3535
steps:
36-
- uses: actions/checkout@v6
36+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
3737

3838
- name: Build Container
3939
run: |

.github/workflows/pre-commit.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
pre-commit:
2222
runs-on: ubuntu-24.04
2323
steps:
24-
- uses: actions/checkout@v6
24+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
2525
- uses: actions/setup-python@v6
2626
with:
2727
python-version: '3.12'

0 commit comments

Comments
 (0)