From 4c564bd4445d5fda4b592d6177b65f721a39c8e6 Mon Sep 17 00:00:00 2001 From: Wenju He Date: Thu, 30 May 2024 20:05:09 -0700 Subject: [PATCH] [CI] Add pinned-dependencies for workflow files (#528) Address OpenSSF "Pinned-Dependencies" in #516 --- .github/workflows/on-demand-verification.yml | 2 +- .github/workflows/on-push-verification.yml | 2 +- .github/workflows/scheduled-verification.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/on-demand-verification.yml b/.github/workflows/on-demand-verification.yml index ce6efe4..81fc990 100644 --- a/.github/workflows/on-demand-verification.yml +++ b/.github/workflows/on-demand-verification.yml @@ -40,7 +40,7 @@ jobs: steps: - name: Checkout opencl-clang sources for action files availabilty - uses: actions/checkout@v4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Run build-opencl-clang action uses: ./.github/actions/build-opencl-clang diff --git a/.github/workflows/on-push-verification.yml b/.github/workflows/on-push-verification.yml index d744560..f1ecbc4 100644 --- a/.github/workflows/on-push-verification.yml +++ b/.github/workflows/on-push-verification.yml @@ -35,7 +35,7 @@ jobs: steps: - name: Checkout opencl-clang sources for action files - uses: actions/checkout@v4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Run build-opencl-clang action uses: ./.github/actions/build-opencl-clang diff --git a/.github/workflows/scheduled-verification.yml b/.github/workflows/scheduled-verification.yml index e13b5fd..9d6e694 100644 --- a/.github/workflows/scheduled-verification.yml +++ b/.github/workflows/scheduled-verification.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Checkout opencl-clang sources for action files availabilty - uses: actions/checkout@v4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Run build-opencl-clang action uses: ./.github/actions/build-opencl-clang @@ -39,7 +39,7 @@ jobs: steps: - name: Checkout opencl-clang sources for action files availabilty - uses: actions/checkout@v4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Run build-opencl-clang action uses: ./.github/actions/build-opencl-clang