WordPress.org
Get WordPress

Make WordPress Core

Changeset 50486


Ignore:
Timestamp:
03/03/2021 08:29:04 PM (4 years ago)
Author:
desrosj
Message:

Build/Test Tools: Pin SHA versions to the remaining 3rd party actions.

This also adds inline comments to the end of each action installed using a SHA value to make it easier to determine which version of an action is currently being used.

Follow up to [50474,50476].

Props johnbillion.
See #52625.

Location:
trunk/.github/workflows
Files:
8 edited

Legend:

Unmodified
Added
Removed

  • trunk/.github/workflows/coding-standards.yml

    r50479 r50486  
    5656    steps:
    5757      - name: Checkout repository
    58         uses: actions/checkout@v2
     58        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    5959
    6060      - name: Set up PHP
    61         uses: shivammathur/setup-php@v2
     61        uses: shivammathur/setup-php@afefcaf556d98dc7896cca380e181decb609ca44 # v2.10.0
    6262        with:
    6363          php-version: '7.4'
    … …  
    7171
    7272      - name: Install Composer dependencies
    73         uses: ramsey/composer-install@v1
     73        uses: ramsey/composer-install@92a7904348d4ad30236f3611e33b7f0c6f9edd70 # v1.1.0
    7474        with:
    7575          composer-options: "--no-progress --no-ansi --no-interaction"
    … …  
    109109    steps:
    110110      - name: Checkout repository
    111         uses: actions/checkout@v2
     111        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    112112
    113113      - name: Log debug information
    … …  
    119119
    120120      - name: Install NodeJS
    121         uses: actions/setup-node@v2
     121        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    122122        with:
    123123          node-version: 14
    124124
    125125      - name: Cache NodeJS modules
    126         uses: actions/cache@v2
     126        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    127127        env:
    128128          cache-name: cache-node-modules

  • trunk/.github/workflows/end-to-end-tests.yml

    r50476 r50486  
    4949      - name: Cancel previous runs of this workflow (pull requests only)
    5050        if: ${{ github.event_name == 'pull_request' }}
    51         uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d
     51        uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d # v0.8.0
    5252
    5353      - name: Configure environment variables
    … …  
    5757
    5858      - name: Checkout repository
    59         uses: actions/checkout@v2
     59        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    6060
    6161      - name: Log debug information
    … …  
    7171
    7272      - name: Install NodeJS
    73         uses: actions/setup-node@v2
     73        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    7474        with:
    7575          node-version: 14
    7676
    7777      - name: Cache NodeJS modules
    78         uses: actions/cache@v2
     78        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    7979        env:
    8080          cache-name: cache-node-modules

  • trunk/.github/workflows/javascript-tests.yml

    r50479 r50486  
    5353      - name: Cancel previous runs of this workflow (pull requests only)
    5454        if: ${{ github.event_name == 'pull_request' }}
    55         uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d
     55        uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d # v0.8.0
    5656
    5757      - name: Checkout repository
    58         uses: actions/checkout@v2
     58        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    5959
    6060      - name: Log debug information
    … …  
    6666
    6767      - name: Install NodeJS
    68         uses: actions/setup-node@v2
     68        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    6969        with:
    7070          node-version: 14
    7171
    7272      - name: Cache NodeJS modules
    73         uses: actions/cache@v2
     73        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    7474        env:
    7575          cache-name: cache-node-modules

  • trunk/.github/workflows/php-compatibility.yml

    r50479 r50486  
    5050    steps:
    5151      - name: Checkout repository
    52         uses: actions/checkout@v2
     52        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    5353
    5454      - name: Set up PHP
    55         uses: shivammathur/setup-php@v2
     55        uses: shivammathur/setup-php@afefcaf556d98dc7896cca380e181decb609ca44 # v2.10.0
    5656        with:
    5757          php-version: '7.4'
    … …  
    6565
    6666      - name: Install Composer dependencies
    67         uses: ramsey/composer-install@v1
     67        uses: ramsey/composer-install@92a7904348d4ad30236f3611e33b7f0c6f9edd70 # v1.1.0
    6868        with:
    6969          composer-options: "--no-progress --no-ansi --no-interaction"

  • trunk/.github/workflows/phpunit-tests.yml

    r50476 r50486  
    4242      - name: Cancel previous runs of this workflow (pull requests only)
    4343        if: ${{ github.event_name == 'pull_request' }}
    44         uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d
     44        uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d # v0.8.0
    4545
    4646  # Runs the PHPUnit tests for WordPress.
    … …  
    117117
    118118      - name: Checkout repository
    119         uses: actions/checkout@v2
     119        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    120120
    121121      - name: Install NodeJS
    122         uses: actions/setup-node@v2
     122        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    123123        with:
    124124          node-version: 14
    125125
    126126      - name: Use cached Node modules
    127         uses: actions/cache@v2
     127        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    128128        env:
    129129          cache-name: cache-node-modules
    … …  
    143143      - name: Cache Composer dependencies
    144144        if: ${{ env.COMPOSER_INSTALL == true || env.LOCAL_PHP == '8.0-fpm' }}
    145         uses: actions/cache@v2
     145        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    146146        env:
    147147          cache-name: cache-composer-dependencies
    … …  
    238238      - name: Checkout the WordPress Test Reporter
    239239        if: ${{ github.repository == 'WordPress/wordpress-develop' && github.ref == 'refs/heads/master' && matrix.report }}
    240         uses: actions/checkout@v2
     240        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    241241        with:
    242242          repository: 'WordPress/phpunit-test-runner'

  • trunk/.github/workflows/test-coverage.yml

    r50446 r50486  
    4949
    5050      - name: Checkout repository
    51         uses: actions/checkout@v2
     51        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    5252
    5353      - name: Checkout the WordPress Importer plugin
    … …  
    6868
    6969      - name: Install NodeJS
    70         uses: actions/setup-node@v2
     70        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    7171        with:
    7272          node-version: 14
    7373
    7474      - name: Cache NodeJS modules
    75         uses: actions/cache@v2
     75        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    7676        env:
    7777          cache-name: cache-node-modules
    … …  
    119119
    120120      - name: Upload single site report to Codecov
    121         uses: codecov/codecov-action@v1
     121        uses: codecov/codecov-action@e156083f13aff6830c92fc5faa23505779fbf649 # v1.2.1
    122122        with:
    123123          file: wp-code-coverage-single-clover-${{ github.sha }}.xml
    … …  
    128128
    129129      - name: Upload multisite report to Codecov
    130         uses: codecov/codecov-action@v1
     130        uses: codecov/codecov-action@e156083f13aff6830c92fc5faa23505779fbf649 # v1.2.1
    131131        with:
    132132          file: wp-code-coverage-multisite-clover-${{ github.sha }}.xml

  • trunk/.github/workflows/test-npm.yml

    r50485 r50486  
    4141      - name: Cancel previous runs of this workflow (pull requests only)
    4242        if: ${{ github.event_name == 'pull_request' }}
    43         uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d
     43        uses: styfle/cancel-workflow-action@3d86a7cc43670094ac248017207be0295edbc31d # v0.8.0
    4444
    4545  # Verifies that installing NPM dependencies and building WordPress works as expected.
    … …  
    6666    steps:
    6767      - name: Checkout repository
    68         uses: actions/checkout@v2
     68        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    6969
    7070      - name: Log debug information
    … …  
    7777
    7878      - name: Install NodeJS
    79         uses: actions/setup-node@v2
     79        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    8080        with:
    8181          node-version: 14
    8282
    8383      - name: Cache NodeJS modules (Ubuntu & MacOS)
    84         uses: actions/cache@v2
     84        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    8585        if: ${{ matrix.os != 'windows-latest' }}
    8686        with:
    … …  
    9494
    9595      - name: Cache NodeJS modules (Windows only)
    96         uses: actions/cache@v2
     96        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    9797        if: ${{ matrix.os == 'windows-latest' }}
    9898        with:
    … …  
    136136    steps:
    137137      - name: Checkout repository
    138         uses: actions/checkout@v2
     138        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
    139139
    140140      - name: Log debug information
    … …  
    147147
    148148      - name: Install NodeJS
    149         uses: actions/setup-node@v2
     149        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
    150150        with:
    151151          node-version: 14
    152152
    153153      - name: Cache NodeJS modules
    154         uses: actions/cache@v2
     154        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
    155155        if: ${{ matrix.os != 'windows-latest' }}
    156156        with:

  • trunk/.github/workflows/welcome-new-contributors.yml

    r50474 r50486  
    1212
    1313    steps:
    14       - uses: bubkoo/welcome-action@8dbbac2540d155744c90e4e37da6b05ffc9c5e2c
     14      - uses: bubkoo/welcome-action@8dbbac2540d155744c90e4e37da6b05ffc9c5e2c # v1.0.3
    1515        with:
    1616          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Note: See TracChangeset for help on using the changeset viewer.