chore: replace versions with SHA (#13248)

deriv-com · Jan 31, 2024 · 96654b6 · 96654b6
1 parent 617bea6
commit 96654b6
Show file tree

Hide file tree

Showing 17 changed files with 33 additions and 33 deletions.
diff --git a/.github/actions/invalidate_npm_cache/action.yml b/.github/actions/invalidate_npm_cache/action.yml
@@ -5,7 +5,7 @@ runs:
   steps:
 
   - name: save_cache
-    uses: actions/cache/save@v3
+    uses: actions/cache/save@13aacd865c20de90d75de3b17ebe84f7a17d57d2
     with:
       path: |-
         node_modules

diff --git a/.github/actions/npm_install_from_cache/action.yml b/.github/actions/npm_install_from_cache/action.yml
@@ -10,7 +10,7 @@ runs:
   #   shell: bash
   - name: Cache node modules
     id: cache-nodemodules
-    uses: actions/cache/restore@v3
+    uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2
     with:
       path: |-
         node_modules

diff --git a/.github/actions/setup_node/action.yml b/.github/actions/setup_node/action.yml
@@ -4,6 +4,6 @@ runs:
   using: composite
   steps:
   - name: Use Node.js 18.x
-    uses: actions/setup-node@v3
+    uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
     with:
       node-version: 18.x
diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: Runner_8cores_Deriv-app
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Setup Node
         uses: './.github/actions/setup_node'
       - name: Install dependencies
@@ -21,4 +21,4 @@ jobs:
       - name: Test
         run: JEST_MAX_WORKERS=95% npm run test:jest -- --collectCoverage
       - name: Coveralls
-        uses: coverallsapp/github-action@v2
+        uses: coverallsapp/github-action@3dfc5567390f6fa9267c0ee9c251e4c8c3f18949
diff --git a/.github/workflows/generate_and_push_deriv_api_types.yml b/.github/workflows/generate_and_push_deriv_api_types.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Setup node
         id: step1
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
         with:
           node-version: "18"
           check-latest: true
@@ -60,7 +60,7 @@ jobs:
       
       - name: Checkout repo
         id: step4
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 1
           ref: master

diff --git a/.github/workflows/generate_app_id.yml b/.github/workflows/generate_app_id.yml
@@ -35,7 +35,7 @@ jobs:
             - name: Comment on pull request with App ID and URLs
               id: sticky_comment_on_pr
               if: steps.generate_app_id.outputs.should_post_comment
-              uses: marocchino/sticky-pull-request-comment@v1
+              uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
               with:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   header: deriv-app-id-action

diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
@@ -13,7 +13,7 @@ jobs:
     environment: Preview
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install dependencies

diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
@@ -18,14 +18,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout to repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 1
           ref: master
 
       - name: Add Lighthouse progress comment
         id: generate_lighthouse_comment
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{github.event.issue.number}}
@@ -40,7 +40,7 @@ jobs:
           preview_url_regexp: \[Visit Preview\]\((.*?.sx)\)
 
       - name: Generate Lighthouse report
-        uses: treosh/lighthouse-ci-action@v9
+        uses: treosh/lighthouse-ci-action@03becbfc543944dd6e7534f7ff768abb8a296826
         id: lighthouse_report
         with:
           temporaryPublicStorage: true
@@ -52,7 +52,7 @@ jobs:
 
       - name: Retrieve Lighthouse score
         id: lighthouse_score
-        uses: actions/github-script@v3
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
@@ -78,15 +78,15 @@ jobs:
              core.setOutput("comment", comment);
 
       - name: Post Lighthouse report
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           header: Lighthouse report
           number: ${{github.event.issue.number}}
           message: ${{steps.lighthouse_score.outputs.comment}}
 
       - name: Clear Lighthouse progress comment
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{github.event.issue.number}}

diff --git a/.github/workflows/merge_and_release_to_staging.yml b/.github/workflows/merge_and_release_to_staging.yml
@@ -26,11 +26,11 @@ jobs:
     timeout-minutes: 600
     steps:
       - name: Checkout to repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           ref: master
       - name: Setup node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
       - name: Wait for logs to accumulate
         run: |
           sleep 10

diff --git a/.github/workflows/push_and_pull_crowdin_translations.yml b/.github/workflows/push_and_pull_crowdin_translations.yml
@@ -23,14 +23,14 @@ jobs:
         node-version: [18.x]
     steps:
       - name: Setup node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8
         with:
           node-version: ${{ matrix.node-version }}
 
       # We checkout the master branch so we can run the translations
       # script on the latest changes.
       - name: Checkout master branch
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Import GPG key
         id: import-gpg

diff --git a/.github/workflows/release_production.yml b/.github/workflows/release_production.yml
@@ -14,7 +14,7 @@ jobs:
       RELEASE_VERSION: ${{ steps.extract_version.outputs.RELEASE_VERSION }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install Dependencies
@@ -51,7 +51,7 @@ jobs:
         CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
         CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
     - name: Upload Build Artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8
       with:
         name: build
         path: packages/core/dist
@@ -65,9 +65,9 @@ jobs:
       needs: [build_test_and_publish]
       steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Conclusion
-        uses: technote-space/workflow-conclusion-action@v3
+        uses: technote-space/workflow-conclusion-action@45ce8e0eb155657ab8ccf346ade734257fd196a5
       - name: Create Slack Message
         id: create_slack_message
         run: |
@@ -89,9 +89,9 @@ jobs:
     needs: [build_test_and_publish]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Download Build Artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935
         with:
           name: build
           path: packages/core/dist

diff --git a/.github/workflows/release_staging.yml b/.github/workflows/release_staging.yml
@@ -11,7 +11,7 @@ jobs:
     environment: Staging
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install Dependencies

diff --git a/.github/workflows/release_test.yml b/.github/workflows/release_test.yml
@@ -11,7 +11,7 @@ jobs:
     environment: Staging
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install Dependencies

diff --git a/.github/workflows/release_uat.yml b/.github/workflows/release_uat.yml
@@ -12,7 +12,7 @@ jobs:
     environment: Staging
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install Dependencies

diff --git a/.github/workflows/smoketests.yml b/.github/workflows/smoketests.yml
@@ -28,13 +28,13 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Checkout external repository with Cypress tests
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       with:
         repository: deriv-com/e2e-deriv-app
 
     - name: Cypress run
       # Uses the official Cypress GitHub action https://github.com/cypress-io/github-action
-      uses: cypress-io/github-action@v6
+      uses: cypress-io/github-action@1b70233146622b69e789ccdd4f9452adc638d25a
       with:
         # Records to Cypress Cloud 
         # https://docs.cypress.io/guides/cloud/projects#Set-up-a-project-to-record
@@ -74,7 +74,7 @@ jobs:
         
     - name: Leave comment
       if: always()
-      uses: marocchino/sticky-pull-request-comment@v2
+      uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd
       with:
         header: Smoke tests status update
         number: ${{ github.event.issue.number }}

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -12,7 +12,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v8
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e
         with:
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
           stale-pr-message:  'This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days.'

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
     environment: Preview
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Setup Node
       uses: "./.github/actions/setup_node"
     - name: Install dependencies