feat(build): #919 pin github actions

- Pin actions to a commit hash Signed-off-by: Kevin Amado <[email protected]>
fluidattacks · Oct 4, 2022 · f8f66d8 · f8f66d8
1 parent 0cba674
commit f8f66d8
Show file tree

Hide file tree

Showing 6 changed files with 15 additions and 12 deletions.
diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 ---
 permissions: read-all
 concurrency:
@@ -565,7 +569,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-      - uses: cachix/install-nix-action@v15
+      - uses: cachix/install-nix-action@5f45af07a1f451c75a4ce84e1514200195a1f279
       - name: /tests/makeSearchPaths
         run: nix-env -if . && m . /tests/makeSearchPaths
 
@@ -582,7 +586,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-      - uses: cachix/install-nix-action@v15
+      - uses: cachix/install-nix-action@5f45af07a1f451c75a4ce84e1514200195a1f279
       - name: /tests/makeTemplate
         run: nix-env -if . && m . /tests/makeTemplate
 
@@ -599,7 +603,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
-      - uses: cachix/install-nix-action@v15
+      - uses: cachix/install-nix-action@5f45af07a1f451c75a4ce84e1514200195a1f279
       - name: /tests/scriptWithHelp
         run: nix-env -if . && m . /tests/scriptWithHelp
 

diff --git a/.github/workflows/dev.yml.license b/.github/workflows/dev.yml.license
diff --git a/.github/workflows/prod.yml b/.github/workflows/prod.yml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 ---
 concurrency:
   cancel-in-progress: true

diff --git a/.github/workflows/prod.yml.license b/.github/workflows/prod.yml.license
diff --git a/.github/workflows/scorecards-analysis.yaml b/.github/workflows/scorecards-analysis.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 ---
 name: Scorecards supply-chain security
 on:

diff --git a/.github/workflows/scorecards-analysis.yaml.license b/.github/workflows/scorecards-analysis.yaml.license