Merge pull request #761 from Iterable/MOB-8328-isrr-529-address-github-actions-with-commit-sha-in-swift-sdk

[MOB-8328] - use secure commit SHA in actions

Author: jyu115

.github/workflows/build-and-test.yml

@@ -7,18 +7,18 @@ jobs:
     runs-on: macos-12
 
     steps:
-    - uses: actions/checkout@v2
-    
-    - uses: maxim-lobanov/[email protected]
-      with:
-        xcode-version: latest
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
-    - name: Build and test
-      run: |
-        xcodebuild test -project swift-sdk.xcodeproj -scheme swift-sdk -sdk iphonesimulator -destination 'platform=iOS Simulator,name=iPhone 13 Pro Max' -enableCodeCoverage YES CODE_SIGNING_REQUIRED=NO | xcpretty && exit ${PIPESTATUS[0]}
-        
-    - name: CocoaPods lint
-      run: pod lib lint
+      - uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
+        with:
+          xcode-version: latest
 
-    - name: Upload coverage report to codecov.io
-      run: bash <(curl -s https://codecov.io/bash) -X gcov -J 'IterableSDK' -J 'IterableAppExtensions'
+      - name: Build and test
+        run: |
+          xcodebuild test -project swift-sdk.xcodeproj -scheme swift-sdk -sdk iphonesimulator -destination 'platform=iOS Simulator,name=iPhone 13 Pro Max' -enableCodeCoverage YES CODE_SIGNING_REQUIRED=NO | xcpretty && exit ${PIPESTATUS[0]}
+
+      - name: CocoaPods lint
+        run: pod lib lint
+
+      - name: Upload coverage report to codecov.io
+        run: bash <(curl -s https://codecov.io/bash) -X gcov -J 'IterableSDK' -J 'IterableAppExtensions'

.github/workflows/e2e.yml

@@ -5,22 +5,21 @@ on: pull_request
 jobs:
   run-e2e-job:
     runs-on: macos-latest
-    
+
     steps:
-    - uses: actions/checkout@v2
-    
-    - uses: maxim-lobanov/setup-xcode@v1.3.0
-      with:
-        xcode-version: 13.0
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
+        with:
+          xcode-version: 13.0
 
-    - name: Build and test
-      env: 
-        api_key: ${{secrets.E2E_API_KEY}}
-        server_api_key: ${{secrets.E2E_SERVER_API_KEY}}
-        push_campaign_id: ${{secrets.E2E_PUSH_CAMPAIGN_ID}}
-        push_template_id: ${{secrets.E2E_PUSH_TEMPLATE_ID}}
-        in_app_campaign_id: ${{secrets.E2E_IN_APP_CAMPAIGN_ID}}
-        in_app_template_id: ${{secrets.E2E_IN_APP_TEMPLATE_ID}}
-      run: |
-        ./tests/endpoint-tests/scripts/run_test.sh
-        
+      - name: Build and test
+        env:
+          api_key: ${{secrets.E2E_API_KEY}}
+          server_api_key: ${{secrets.E2E_SERVER_API_KEY}}
+          push_campaign_id: ${{secrets.E2E_PUSH_CAMPAIGN_ID}}
+          push_template_id: ${{secrets.E2E_PUSH_TEMPLATE_ID}}
+          in_app_campaign_id: ${{secrets.E2E_IN_APP_CAMPAIGN_ID}}
+          in_app_template_id: ${{secrets.E2E_IN_APP_TEMPLATE_ID}}
+        run: |
+          ./tests/endpoint-tests/scripts/run_test.sh

.github/workflows/ios-sdk-release.yml

@@ -34,8 +34,8 @@ jobs:
     runs-on: macos-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: ruby/setup-ruby@6bd3d993c602f6b675728ebaecb2b569ff86e99b # v1.174.0
         with:
           ruby-version: "3.2"
           bundler-cache: true