From 89f01a4ee0ee5a3c1964862ec9e40b742d3c64cd Mon Sep 17 00:00:00 2001 From: StepSecurity Bot Date: Mon, 17 Jul 2023 12:18:31 +0000 Subject: [PATCH] [StepSecurity] ci: Harden GitHub Actions Signed-off-by: StepSecurity Bot --- .github/workflows/ci.yaml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index e82331cd..08498ac2 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -24,10 +24,10 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Set up Go cache - uses: actions/cache@v3 + uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 with: path: | ~/.cache/go-build @@ -69,10 +69,10 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Set up Go cache - uses: actions/cache@v3 + uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 with: path: | ~/.cache/go-build @@ -102,10 +102,10 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Set up Go cache - uses: actions/cache@v3 + uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 with: path: | ~/.cache/go-build @@ -135,10 +135,10 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Set up Go cache - uses: actions/cache@v3 + uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 with: path: | ~/.cache/go-build @@ -185,7 +185,7 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Check run: nix flake check --impure @@ -236,7 +236,7 @@ jobs: access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} - name: Set up magic Nix cache - uses: DeterminateSystems/magic-nix-cache-action@v2 + uses: DeterminateSystems/magic-nix-cache-action@8a218f9e264e9c3803c9a1ee1c30d8e4ab55be63 # v2 - name: Prepare Nix shell run: nix develop --impure .#ci