Skip to content

chore(ci): pin workflow dependencies - #4539

Open
ScrewTSW wants to merge 1 commit into
containers:mainfrom
ScrewTSW:pin-workflow-dependencies
Open

chore(ci): pin workflow dependencies#4539
ScrewTSW wants to merge 1 commit into
containers:mainfrom
ScrewTSW:pin-workflow-dependencies

Conversation

@ScrewTSW

Copy link
Copy Markdown
Member

Summary

  • Pin all third-party GitHub Actions to full-length commit SHAs instead of mutable version tags
  • Follows the OpenSSF Scorecard Pinned-Dependencies recommendation

Related to podman-desktop/podman-desktop#16848

Test plan

  • Verify CI workflows still pass
  • Confirm SHAs match upstream tags

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Tibor Dancs (work-laptop) <tdancs@redhat.com>
@ScrewTSW
ScrewTSW force-pushed the pin-workflow-dependencies branch from 06837c3 to f7e3a8b Compare June 10, 2026 14:22

- name: Publish Test Report
uses: mikepenz/action-junit-report@v6
uses: mikepenz/action-junit-report@3a81627bfac62268172037048872e8ebd4207e6d # v6

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: latest is v6.4.1 ?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.


- name: Upload test artifacts
uses: actions/upload-artifact@v7
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: latest is v7.0.1

@ScrewTSW ScrewTSW Jun 11, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

latest commit, v7.0.1 actions/upload-artifact@043fb46

- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

- uses: pnpm/action-setup@v6
- uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: latest is 6.0.8

@ScrewTSW ScrewTSW Jun 11, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

latest commit, v6.0.8 pnpm/action-setup@0e279bb

run_install: false

- uses: actions/setup-node@v6
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: latest is 6.4.0

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@bmahabirbu bmahabirbu left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems a few tests are failing will comeback once green

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants