|
66 | 66 | security-events: write
|
67 | 67 | runs-on: "ubuntu-latest"
|
68 | 68 | steps:
|
69 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 69 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
70 | 70 | - uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
|
71 | 71 | with:
|
72 | 72 | languages: ${{ inputs.code-ql }}
|
|
79 | 79 | contents: read
|
80 | 80 | runs-on: "ubuntu-latest"
|
81 | 81 | steps:
|
82 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 82 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
83 | 83 | - uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0
|
84 | 84 |
|
85 | 85 | setup:
|
|
93 | 93 | build-commands: ${{ steps.build-variables.outputs.commands }}
|
94 | 94 | build-artifact: ${{ steps.build-variables.outputs.artifact }}
|
95 | 95 | steps:
|
96 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 96 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
97 | 97 |
|
98 | 98 | # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
|
99 | 99 | # jscpd:ignore-start
|
@@ -168,7 +168,7 @@ jobs:
|
168 | 168 | contents: read
|
169 | 169 | id-token: write
|
170 | 170 | steps:
|
171 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 171 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
172 | 172 |
|
173 | 173 | # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
|
174 | 174 | - id: oidc
|
@@ -204,7 +204,7 @@ jobs:
|
204 | 204 | contents: read
|
205 | 205 | id-token: write
|
206 | 206 | steps:
|
207 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 207 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
208 | 208 | if: needs.setup.outputs.build-commands
|
209 | 209 |
|
210 | 210 | # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
|
@@ -267,7 +267,7 @@ jobs:
|
267 | 267 | contents: read
|
268 | 268 | id-token: write
|
269 | 269 | steps:
|
270 |
| - - uses: hoverkraft-tech/ci-github-common/actions/checkout@198d391bd7046a3c8ca503d3387ad9c5ba8f9f29 # 0.22.0 |
| 270 | + - uses: hoverkraft-tech/ci-github-common/actions/checkout@abd5469ef96aaa3fa1508e2cbaa3e76734533e8a # 0.22.2 |
271 | 271 |
|
272 | 272 | - if: needs.setup.outputs.build-artifact
|
273 | 273 | uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
@@ -299,7 +299,7 @@ jobs:
|
299 | 299 |
|
300 | 300 | - name: 📊 Code coverage
|
301 | 301 | if: inputs.coverage == 'codecov'
|
302 |
| - uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0 |
| 302 | + uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2 |
303 | 303 | with:
|
304 | 304 | use_oidc: true
|
305 | 305 | disable_telem: true
|
0 commit comments