Skip to content

Commit e1a5550

Browse files
SuperQSuperQ
committed
Pin GitHub Actions
Pin GitHub actions for supply chain security. * Mark dependabot config to be skipped by repo sync. Signed-off-by: SuperQ <superq@gmail.com>
1 parent 9fb7c37 commit e1a5550

2 files changed

Lines changed: 34 additions & 31 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
###
2+
# Avoid syncing from prometheus/prometheus: no_prometheus_repo_sync
3+
###
14
version: 2
25
updates:
36
- package-ecosystem: "cargo"

‎.github/workflows/rust.yml‎

Lines changed: 31 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -8,40 +8,40 @@ jobs:
88
runs-on: ubuntu-latest
99
steps:
1010
- name: Install Protoc
11-
uses: arduino/setup-protoc@v1
11+
uses: arduino/setup-protoc@f4d5893b897028ff5739576ea0409746887fa536 # v3.0.0
1212
with:
1313
repo-token: ${{ secrets.GITHUB_TOKEN }}
14-
- uses: actions/checkout@v2
15-
- uses: actions-rs/toolchain@v1
14+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
15+
- uses: actions-rs/toolchain@56751392ac172fc3a68fef1413f507767ed5f563 # v1.0.6
1616
with:
1717
profile: minimal
1818
toolchain: stable
1919
override: true
2020

2121
# Install prometheus_client python library.
22-
- uses: actions/setup-python@v2
22+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
2323
with:
2424
python-version: '3.x'
2525
- run: pip3 install prometheus_client
2626

2727
# Caching
2828
- name: Cache cargo registry
29-
uses: actions/cache@v4
29+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
3030
with:
3131
path: ~/.cargo/registry
3232
key: cargo-registry-${{ hashFiles('Cargo.toml') }}
3333
- name: Cache cargo index
34-
uses: actions/cache@v4
34+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
3535
with:
3636
path: ~/.cargo/git
3737
key: cargo-index-${{ hashFiles('Cargo.toml') }}
3838

39-
- uses: actions-rs/cargo@v1
39+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
4040
with:
4141
command: check
4242
args: --locked
4343

44-
- uses: actions-rs/cargo@v1
44+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
4545
with:
4646
command: test
4747
args: --locked --benches --all-features
@@ -51,35 +51,35 @@ jobs:
5151
runs-on: ubuntu-latest
5252
steps:
5353
- name: Install Protoc
54-
uses: arduino/setup-protoc@v1
54+
uses: arduino/setup-protoc@f4d5893b897028ff5739576ea0409746887fa536 # v3.0.0
5555
with:
5656
repo-token: ${{ secrets.GITHUB_TOKEN }}
57-
- uses: actions/checkout@v2
58-
- uses: actions-rs/toolchain@v1
57+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
58+
- uses: actions-rs/toolchain@56751392ac172fc3a68fef1413f507767ed5f563 # v1.0.6
5959
with:
6060
profile: minimal
6161
toolchain: stable
6262
override: true
6363

6464
# Install prometheus_client python library.
65-
- uses: actions/setup-python@v2
65+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
6666
with:
6767
python-version: '3.x'
6868
- run: pip3 install prometheus_client
6969

7070
# Caching
7171
- name: Cache cargo registry
72-
uses: actions/cache@v4
72+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
7373
with:
7474
path: ~/.cargo/registry
7575
key: cargo-registry-${{ hashFiles('Cargo.toml') }}
7676
- name: Cache cargo index
77-
uses: actions/cache@v4
77+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
7878
with:
7979
path: ~/.cargo/git
8080
key: cargo-index-${{ hashFiles('Cargo.toml') }}
8181

82-
- uses: actions-rs/cargo@v1
82+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
8383
with:
8484
command: test
8585
args: --locked --all --all-features
@@ -89,17 +89,17 @@ jobs:
8989
runs-on: ubuntu-latest
9090
steps:
9191
- name: Install Protoc
92-
uses: arduino/setup-protoc@v1
92+
uses: arduino/setup-protoc@f4d5893b897028ff5739576ea0409746887fa536 # v3.0.0
9393
with:
9494
repo-token: ${{ secrets.GITHUB_TOKEN }}
95-
- uses: actions/checkout@v2
96-
- uses: actions-rs/toolchain@v1
95+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
96+
- uses: actions-rs/toolchain@56751392ac172fc3a68fef1413f507767ed5f563 # v1.0.6
9797
with:
9898
profile: minimal
9999
toolchain: stable
100100
override: true
101101
- run: rustup component add rustfmt
102-
- uses: actions-rs/cargo@v1
102+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
103103
with:
104104
command: fmt
105105
args: --all -- --check
@@ -109,11 +109,11 @@ jobs:
109109
runs-on: ubuntu-latest
110110
steps:
111111
- name: Install Protoc
112-
uses: arduino/setup-protoc@v1
112+
uses: arduino/setup-protoc@f4d5893b897028ff5739576ea0409746887fa536 # v3.0.0
113113
with:
114114
repo-token: ${{ secrets.GITHUB_TOKEN }}
115-
- uses: actions/checkout@v2
116-
- uses: actions-rs/toolchain@v1
115+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
116+
- uses: actions-rs/toolchain@56751392ac172fc3a68fef1413f507767ed5f563 # v1.0.6
117117
with:
118118
profile: minimal
119119
toolchain: stable
@@ -122,17 +122,17 @@ jobs:
122122

123123
# Caching
124124
- name: Cache cargo registry
125-
uses: actions/cache@v4
125+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
126126
with:
127127
path: ~/.cargo/registry
128128
key: cargo-registry-${{ hashFiles('Cargo.toml') }}
129129
- name: Cache cargo index
130-
uses: actions/cache@v4
130+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
131131
with:
132132
path: ~/.cargo/git
133133
key: cargo-index-${{ hashFiles('Cargo.toml') }}
134134

135-
- uses: actions-rs/cargo@v1
135+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
136136
with:
137137
command: clippy
138138
args: --locked --workspace --all-targets -- -D warnings
@@ -142,16 +142,16 @@ jobs:
142142
runs-on: ubuntu-latest
143143
steps:
144144
- name: Install Protoc
145-
uses: arduino/setup-protoc@v1
145+
uses: arduino/setup-protoc@f4d5893b897028ff5739576ea0409746887fa536 # v3.0.0
146146
with:
147147
repo-token: ${{ secrets.GITHUB_TOKEN }}
148-
- uses: actions/checkout@v2
149-
- uses: actions-rs/toolchain@v1
148+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
149+
- uses: actions-rs/toolchain@56751392ac172fc3a68fef1413f507767ed5f563 # v1.0.6
150150
with:
151151
profile: minimal
152152
toolchain: stable
153153
override: true
154-
- uses: actions-rs/cargo@v1
154+
- uses: actions-rs/cargo@b0651d9f4d4983fd4cc8e94d927bdc0bb5566667 # v1.0.1
155155
env:
156156
RUSTDOCFLAGS: "--deny broken_intra_doc_links"
157157
with:
@@ -169,9 +169,9 @@ jobs:
169169
- powerpc64-unknown-linux-gnu
170170
- wasm32-unknown-unknown
171171
steps:
172-
- uses: actions/checkout@v2
172+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
173173

174-
- uses: dtolnay/rust-toolchain@stable
174+
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
175175
with:
176176
target: ${{ matrix.target }}
177177

0 commit comments

Comments
 (0)