Skip to content

Commit 8838fc3

Browse files
hyperpolymathclaude
andcommitted
SHA-pin GitHub Actions and upgrade deprecated checkout versions
- Upgrade actions/checkout from v2/v3 to SHA-pinned v4 - SHA-pin all unshelled action tags (pages, CodeQL, scorecard, rust-cache, upload/download-artifact, setup-node, cache) - Standardise scorecard-action to v2.4.0 - Fix setup-node@v6 → SHA-pinned v4 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent e66b66f commit 8838fc3

18 files changed

Lines changed: 5014 additions & 10948 deletions

File tree

.github/workflows/jekyll-gh-pages.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v6.0.1
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3232
- name: Setup Pages
3333
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
3434
- name: Build with Jekyll
@@ -37,7 +37,7 @@ jobs:
3737
source: ./
3838
destination: ./_site
3939
- name: Upload artifact
40-
uses: actions/upload-pages-artifact@v4
40+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
4141

4242
# Deployment job
4343
deploy:

.github/workflows/jekyll.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Checkout
36-
uses: actions/checkout@v6.0.1
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3737
- name: Setup Ruby
3838
# https://github.com/ruby/setup-ruby/releases/tag/v1.207.0
3939
uses: ruby/setup-ruby@708024e6c902387ab41de36e1669e43b5ee7085e
@@ -51,7 +51,7 @@ jobs:
5151
JEKYLL_ENV: production
5252
- name: Upload artifact
5353
# Automatically uploads an artifact from the './_site' directory by default
54-
uses: actions/upload-pages-artifact@v4
54+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
5555

5656
# Deployment job
5757
deploy:

lithoglyph/.github/workflows/jekyll-gh-pages.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,16 +28,16 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v6.0.1
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3232
- name: Setup Pages
33-
uses: actions/configure-pages@v5
33+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
3434
- name: Build with Jekyll
35-
uses: actions/jekyll-build-pages@v1
35+
uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
3636
with:
3737
source: ./
3838
destination: ./_site
3939
- name: Upload artifact
40-
uses: actions/upload-pages-artifact@v4
40+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
4141

4242
# Deployment job
4343
deploy:
@@ -49,4 +49,4 @@ jobs:
4949
steps:
5050
- name: Deploy to GitHub Pages
5151
id: deployment
52-
uses: actions/deploy-pages@v4
52+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

lithoglyph/.github/workflows/jekyll.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Checkout
36-
uses: actions/checkout@v6.0.1
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3737
- name: Setup Ruby
3838
# https://github.com/ruby/setup-ruby/releases/tag/v1.207.0
3939
uses: ruby/setup-ruby@708024e6c902387ab41de36e1669e43b5ee7085e
@@ -43,15 +43,15 @@ jobs:
4343
cache-version: 0 # Increment this number if you need to re-download cached gems
4444
- name: Setup Pages
4545
id: pages
46-
uses: actions/configure-pages@v5
46+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
4747
- name: Build with Jekyll
4848
# Outputs to the './_site' directory by default
4949
run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
5050
env:
5151
JEKYLL_ENV: production
5252
- name: Upload artifact
5353
# Automatically uploads an artifact from the './_site' directory by default
54-
uses: actions/upload-pages-artifact@v4
54+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
5555

5656
# Deployment job
5757
deploy:
@@ -63,4 +63,4 @@ jobs:
6363
steps:
6464
- name: Deploy to GitHub Pages
6565
id: deployment
66-
uses: actions/deploy-pages@v4
66+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

nqc/.github/workflows/test.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
test:
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@v4
14+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
1515
- uses: erlef/setup-beam@v1
1616
with:
1717
otp-version: "28"

verisimdb/verisimdb-data/.github/workflows/jekyll-gh-pages.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,16 +28,16 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout
31-
uses: actions/checkout@v6.0.1
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3232
- name: Setup Pages
33-
uses: actions/configure-pages@v5
33+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
3434
- name: Build with Jekyll
35-
uses: actions/jekyll-build-pages@v1
35+
uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
3636
with:
3737
source: ./
3838
destination: ./_site
3939
- name: Upload artifact
40-
uses: actions/upload-pages-artifact@v4
40+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
4141

4242
# Deployment job
4343
deploy:
@@ -49,4 +49,4 @@ jobs:
4949
steps:
5050
- name: Deploy to GitHub Pages
5151
id: deployment
52-
uses: actions/deploy-pages@v4
52+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

verisimdb/verisimdb-data/.github/workflows/jekyll.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Checkout
36-
uses: actions/checkout@v6.0.1
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3737
- name: Setup Ruby
3838
# https://github.com/ruby/setup-ruby/releases/tag/v1.207.0
3939
uses: ruby/setup-ruby@708024e6c902387ab41de36e1669e43b5ee7085e
@@ -43,15 +43,15 @@ jobs:
4343
cache-version: 0 # Increment this number if you need to re-download cached gems
4444
- name: Setup Pages
4545
id: pages
46-
uses: actions/configure-pages@v5
46+
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
4747
- name: Build with Jekyll
4848
# Outputs to the './_site' directory by default
4949
run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
5050
env:
5151
JEKYLL_ENV: production
5252
- name: Upload artifact
5353
# Automatically uploads an artifact from the './_site' directory by default
54-
uses: actions/upload-pages-artifact@v4
54+
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v4
5555

5656
# Deployment job
5757
deploy:
@@ -63,4 +63,4 @@ jobs:
6363
steps:
6464
- name: Deploy to GitHub Pages
6565
id: deployment
66-
uses: actions/deploy-pages@v4
66+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

0 commit comments

Comments
 (0)