Changeset 50486 for trunk/.github/workflows/test-coverage.yml

Timestamp:

03/03/2021 08:29:04 PM (4 years ago)

Author:

desrosj

Message:

Build/Test Tools: Pin SHA versions to the remaining 3rd party actions.

This also adds inline comments to the end of each action installed using a SHA value to make it easier to determine which version of an action is currently being used.

Follow up to [50474,50476].

Props johnbillion.
See #52625.

File:

• trunk/.github/workflows/test-coverage.yml (modified) (4 diffs)

trunk/.github/workflows/test-coverage.yml

@@ -49 +49 @@
 
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
 
       - name: Checkout the WordPress Importer plugin
@@ -68 +68 @@
 
       - name: Install NodeJS
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@46071b5c7a2e0c34e49c3cb8a0e792e86e18d5ea # v2.1.5
         with:
           node-version: 14
 
       - name: Cache NodeJS modules
-        uses: actions/cache@v2
+        uses: actions/cache@26968a09c0ea4f3e233fdddbafd1166051a095f6 # v2.1.4
         env:
           cache-name: cache-node-modules
@@ -119 +119 @@
 
       - name: Upload single site report to Codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@e156083f13aff6830c92fc5faa23505779fbf649 # v1.2.1
         with:
           file: wp-code-coverage-single-clover-${{ github.sha }}.xml
@@ -128 +128 @@
 
       - name: Upload multisite report to Codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@e156083f13aff6830c92fc5faa23505779fbf649 # v1.2.1
         with:
           file: wp-code-coverage-multisite-clover-${{ github.sha }}.xml