Switch from tags to hashes

conda · Apr 2, 2024 · ac0ac8c · ac0ac8c
1 parent 5c2c527
commit ac0ac8c
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 17 deletions.
diff --git a/canary-release/action.yml b/canary-release/action.yml
@@ -34,15 +34,15 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: conda-incubator/setup-miniconda@v3
+    - uses: conda-incubator/setup-miniconda@030178870c779d9e5e1b4e563269f3aa69b04081
 
     - name: Set output variables
       id: vars
       shell: bash -l {0}
       run: echo "RUN_URL=https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" >> $GITHUB_OUTPUT
 
     - name: Create comment if there is no status update
-      uses: marocchino/sticky-pull-request-comment@v2
+      uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31
       if: inputs.comment-token != ''
       with:
         message: |
@@ -103,7 +103,7 @@ runs:
 
     - name: Leave comment after build
       if: inputs.comment-token != '' && success()
-      uses: marocchino/sticky-pull-request-comment@v2
+      uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31
       with:
         append: true
         message: |
@@ -112,7 +112,7 @@ runs:
 
     - name: Leave comment after build
       if: inputs.comment-token != '' && failure()
-      uses: marocchino/sticky-pull-request-comment@v2
+      uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31
       with:
         append: true
         message: |

diff --git a/check-cla/action.yml b/check-cla/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     # if triggered by a comment, leave a reaction
     - name: React to comment
-      uses: peter-evans/create-or-update-comment@v4.0.0
+      uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043
       if: github.event_name == 'issue_comment'
       with:
         token: ${{ inputs.token }}
@@ -43,7 +43,7 @@ runs:
 
     # commit status → pending
     - name: Set commit status with pending
-      uses: conda/actions/set-commit-status@v23.10.0
+      uses: conda/actions/set-commit-status@dd4ac84de3d7e96348e09fef478e80aafa7c259a
       with:
         token: ${{ inputs.token }}
         context: CLA check
@@ -52,7 +52,7 @@ runs:
 
     # has_label, number, contributor, url, has_signed
     - name: Collect PR metadata
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
       id: metadata
       with:
         github-token: ${{ inputs.token }}
@@ -101,23 +101,23 @@ runs:
 
     # if contributor has already signed, add [cla-signed] label
     - name: Add label to PR
-      uses: actions-ecosystem/action-add-labels@v1.1.3
+      uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf
       if: steps.metadata.outputs.has_signed == 'true' && steps.metadata.outputs.has_label == 'false'
       with:
         github_token: ${{ inputs.token }}
         labels: ${{ inputs.label }}
 
     # if contributor has not signed yet, remove [cla-signed] label
     - name: Remove label to PR
-      uses: actions-ecosystem/action-remove-labels@v1.3.0
+      uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0
       if: steps.metadata.outputs.has_signed == 'false' && steps.metadata.outputs.has_label == 'true'
       with:
         github_token: ${{ inputs.token }}
         labels: ${{ inputs.label }}
 
     # if unsigned, checkout cla_repo
     - name: Clone CLA signee repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       if: steps.metadata.outputs.has_signed == 'false'
       with:
         repository: ${{ inputs.cla_repo }}
@@ -138,7 +138,7 @@ runs:
 
     # if unsigned, create PR
     - name: Create PR with new CLA signee
-      uses: peter-evans/create-pull-request@v6
+      uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e
       id: pull
       if: steps.metadata.outputs.has_signed == 'false'
       with:
@@ -157,7 +157,7 @@ runs:
 
     # if unsigned, create sticky comment
     - name: Create comment regarding missing CLA signature
-      uses: marocchino/sticky-pull-request-comment@v2
+      uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31
       if: steps.metadata.outputs.has_signed == 'false'
       with:
         number: ${{ steps.metadata.outputs.number }}
@@ -180,7 +180,7 @@ runs:
     # commit status → error
     - name: Set commit status to error
       if: steps.metadata.outputs.has_signed == 'false'
-      uses: conda/actions/set-commit-status@v23.10.0
+      uses: conda/actions/set-commit-status@dd4ac84de3d7e96348e09fef478e80aafa7c259a
       with:
         token: ${{ inputs.token }}
         context: CLA check
@@ -191,7 +191,7 @@ runs:
     # commit status → success
     - name: Set commit status to success
       if: steps.metadata.outputs.has_signed == 'true'
-      uses: conda/actions/set-commit-status@v23.10.0
+      uses: conda/actions/set-commit-status@dd4ac84de3d7e96348e09fef478e80aafa7c259a
       with:
         token: ${{ inputs.token }}
         context: CLA check

diff --git a/read-yaml/action.yml b/read-yaml/action.yml
@@ -16,13 +16,13 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8
       with:
         node-version: 16
     - run: npm install js-yaml axios
       shell: bash -l {0}
     - id: read_yaml
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
       with:
         script: |
           const yaml = require('js-yaml');

diff --git a/set-commit-status/action.yml b/set-commit-status/action.yml
@@ -25,7 +25,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/github-script@v6
+    - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
       with:
         github-token: ${{ inputs.token }}
         script: |