Skip to content

Commit c95ecf0

Browse files
IlanlidoIlanlido
committed
Merge remote-tracking branch 'origin/main' into CM-60929-report-mode
2 parents 4f8bc30 + 364da74 commit c95ecf0

File tree

8 files changed

+55
-49
lines changed

8 files changed

+55
-49
lines changed

‎.github/workflows/build_executable.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
steps:
3939
- name: Run Cimon
4040
if: matrix.os == 'ubuntu-22.04'
41-
uses: cycodelabs/cimon-action@v0
41+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
4242
with:
4343
client-id: ${{ secrets.CIMON_CLIENT_ID }}
4444
secret: ${{ secrets.CIMON_SECRET }}
@@ -50,7 +50,7 @@ jobs:
5050
uploads.github.com
5151
5252
- name: Checkout repository
53-
uses: actions/checkout@v4
53+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5454
with:
5555
fetch-depth: 0
5656

@@ -62,20 +62,20 @@ jobs:
6262
echo "LATEST_TAG=$LATEST_TAG" >> $GITHUB_ENV
6363
6464
- name: Set up Python 3.13
65-
uses: actions/setup-python@v6
65+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
6666
with:
6767
python-version: '3.13'
6868

6969
- name: Load cached Poetry setup
7070
id: cached-poetry
71-
uses: actions/cache@v5
71+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
7272
with:
7373
path: ~/.local
7474
key: poetry-${{ matrix.os }}-2 # increment to reset cache
7575

7676
- name: Setup Poetry
7777
if: steps.cached-poetry.outputs.cache-hit != 'true'
78-
uses: snok/install-poetry@v1
78+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
7979
with:
8080
version: 2.2.1
8181

@@ -265,14 +265,14 @@ jobs:
265265
run: echo "ARTIFACT_NAME=$(./process_executable_file.py dist/cycode-cli)" >> $GITHUB_ENV
266266

267267
- name: Upload files as artifact
268-
uses: actions/upload-artifact@v4
268+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
269269
with:
270270
name: ${{ env.ARTIFACT_NAME }}
271271
path: dist
272272

273273
- name: Verify macOS artifact end-to-end
274274
if: runner.os == 'macOS' && matrix.mode == 'onedir'
275-
uses: actions/download-artifact@v8
275+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
276276
with:
277277
name: ${{ env.ARTIFACT_NAME }}
278278
path: /tmp/artifact-verify
@@ -313,7 +313,7 @@ jobs:
313313
314314
- name: Upload files to release
315315
if: ${{ github.event_name == 'workflow_dispatch' && inputs.publish }}
316-
uses: svenstaro/upload-release-action@v2
316+
uses: svenstaro/upload-release-action@b98a3b12e86552593f3e4e577ca8a62aa2f3f22b # v2
317317
with:
318318
file: dist/*
319319
tag: ${{ env.LATEST_TAG }}

‎.github/workflows/docker-image.yml‎

Lines changed: 12 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,16 @@ on:
66
push:
77
tags: [ 'v*.*.*' ]
88

9+
permissions:
10+
contents: read
11+
912
jobs:
1013
docker:
1114
runs-on: ubuntu-latest
1215

1316
steps:
1417
- name: Checkout repository
15-
uses: actions/checkout@v4
18+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
1619
with:
1720
fetch-depth: 0
1821

@@ -28,20 +31,20 @@ jobs:
2831
git checkout ${{ steps.latest_tag.outputs.LATEST_TAG }}
2932
3033
- name: Set up Python
31-
uses: actions/setup-python@v6
34+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3235
with:
3336
python-version: '3.9'
3437

3538
- name: Load cached Poetry setup
3639
id: cached_poetry
37-
uses: actions/cache@v5
40+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
3841
with:
3942
path: ~/.local
4043
key: poetry-ubuntu-1 # increment to reset cache
4144

4245
- name: Setup Poetry
4346
if: steps.cached_poetry.outputs.cache-hit != 'true'
44-
uses: snok/install-poetry@v1
47+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
4548
with:
4649
version: 2.2.1
4750

@@ -58,22 +61,22 @@ jobs:
5861
echo "CLI_VERSION=$(poetry version --short)" >> $GITHUB_OUTPUT
5962
6063
- name: Set up QEMU
61-
uses: docker/setup-qemu-action@v3
64+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
6265

6366
- name: Set up Docker Buildx
64-
uses: docker/setup-buildx-action@v4
67+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
6568

6669
- name: Login to Docker Hub
6770
if: ${{ github.event_name == 'workflow_dispatch' || startsWith(github.ref, 'refs/tags/v') }}
68-
uses: docker/login-action@v3
71+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
6972
with:
7073
username: ${{ secrets.DOCKERHUB_USER }}
7174
password: ${{ secrets.DOCKERHUB_PASSWORD }}
7275

7376
- name: Build and push
7477
id: docker_build
7578
if: ${{ github.event_name == 'workflow_dispatch' || startsWith(github.ref, 'refs/tags/v') }}
76-
uses: docker/build-push-action@v7
79+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
7780
with:
7881
context: .
7982
platforms: linux/amd64,linux/arm64
@@ -83,7 +86,7 @@ jobs:
8386
- name: Verify build
8487
id: docker_verify_build
8588
if: ${{ github.event_name != 'workflow_dispatch' && !startsWith(github.ref, 'refs/tags/v') }}
86-
uses: docker/build-push-action@v7
89+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
8790
with:
8891
context: .
8992
platforms: linux/amd64,linux/arm64

‎.github/workflows/pre_release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515

1616
steps:
1717
- name: Run Cimon
18-
uses: cycodelabs/cimon-action@v0
18+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
1919
with:
2020
client-id: ${{ secrets.CIMON_CLIENT_ID }}
2121
secret: ${{ secrets.CIMON_SECRET }}
@@ -28,25 +28,25 @@ jobs:
2828
*.sigstore.dev
2929
3030
- name: Checkout repository
31-
uses: actions/checkout@v3
31+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3232
with:
3333
fetch-depth: 0
3434

3535
- name: Set up Python
36-
uses: actions/setup-python@v6
36+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3737
with:
3838
python-version: '3.9'
3939

4040
- name: Load cached Poetry setup
4141
id: cached-poetry
42-
uses: actions/cache@v5
42+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
4343
with:
4444
path: ~/.local
4545
key: poetry-ubuntu-1 # increment to reset cache
4646

4747
- name: Setup Poetry
4848
if: steps.cached-poetry.outputs.cache-hit != 'true'
49-
uses: snok/install-poetry@v1
49+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
5050
with:
5151
version: 2.2.1
5252

@@ -74,4 +74,4 @@ jobs:
7474
run: poetry build
7575

7676
- name: Publish a Python distribution to PyPI
77-
uses: pypa/gh-action-pypi-publish@release/v1
77+
uses: pypa/gh-action-pypi-publish@106e0b0b7c337fa67ed433972f777c6357f78598 # v1.13.0

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
- name: Run Cimon
17-
uses: cycodelabs/cimon-action@v0
17+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
1818
with:
1919
client-id: ${{ secrets.CIMON_CLIENT_ID }}
2020
secret: ${{ secrets.CIMON_SECRET }}
@@ -27,25 +27,25 @@ jobs:
2727
*.sigstore.dev
2828
2929
- name: Checkout repository
30-
uses: actions/checkout@v3
30+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3131
with:
3232
fetch-depth: 0
3333

3434
- name: Set up Python
35-
uses: actions/setup-python@v6
35+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3636
with:
3737
python-version: '3.9'
3838

3939
- name: Load cached Poetry setup
4040
id: cached-poetry
41-
uses: actions/cache@v5
41+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
4242
with:
4343
path: ~/.local
4444
key: poetry-ubuntu-1 # increment to reset cache
4545

4646
- name: Setup Poetry
4747
if: steps.cached-poetry.outputs.cache-hit != 'true'
48-
uses: snok/install-poetry@v1
48+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
4949
with:
5050
version: 2.2.1
5151

@@ -73,4 +73,4 @@ jobs:
7373
run: poetry build
7474

7575
- name: Publish a Python distribution to PyPI
76-
uses: pypa/gh-action-pypi-publish@release/v1
76+
uses: pypa/gh-action-pypi-publish@106e0b0b7c337fa67ed433972f777c6357f78598 # v1.13.0

‎.github/workflows/ruff.yml‎

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,15 @@ name: Ruff (linter and code formatter)
22

33
on: [ pull_request, push ]
44

5+
permissions:
6+
contents: read
7+
58
jobs:
69
ruff:
710
runs-on: ubuntu-latest
811
steps:
912
- name: Run Cimon
10-
uses: cycodelabs/cimon-action@v0
13+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
1114
with:
1215
client-id: ${{ secrets.CIMON_CLIENT_ID }}
1316
secret: ${{ secrets.CIMON_SECRET }}
@@ -18,23 +21,23 @@ jobs:
1821
pypi.org
1922
2023
- name: Checkout repository
21-
uses: actions/checkout@v3
24+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2225

2326
- name: Setup Python
24-
uses: actions/setup-python@v6
27+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2528
with:
2629
python-version: 3.9
2730

2831
- name: Load cached Poetry setup
2932
id: cached-poetry
30-
uses: actions/cache@v5
33+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
3134
with:
3235
path: ~/.local
3336
key: poetry-ubuntu-1 # increment to reset cache
3437

3538
- name: Setup Poetry
3639
if: steps.cached-poetry.outputs.cache-hit != 'true'
37-
uses: snok/install-poetry@v1
40+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
3841
with:
3942
version: 2.2.1
4043

‎.github/workflows/tests.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111

1212
steps:
1313
- name: Run Cimon
14-
uses: cycodelabs/cimon-action@v0
14+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
1515
with:
1616
client-id: ${{ secrets.CIMON_CLIENT_ID }}
1717
secret: ${{ secrets.CIMON_SECRET }}
@@ -23,23 +23,23 @@ jobs:
2323
*.ingest.us.sentry.io
2424
2525
- name: Checkout repository
26-
uses: actions/checkout@v4
26+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2727

2828
- name: Set up Python
29-
uses: actions/setup-python@v6
29+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3030
with:
3131
python-version: '3.9'
3232

3333
- name: Load cached Poetry setup
3434
id: cached-poetry
35-
uses: actions/cache@v5
35+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
3636
with:
3737
path: ~/.local
3838
key: poetry-ubuntu-1 # increment to reset cache
3939

4040
- name: Setup Poetry
4141
if: steps.cached-poetry.outputs.cache-hit != 'true'
42-
uses: snok/install-poetry@v1
42+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
4343
with:
4444
version: 2.2.1
4545

‎.github/workflows/tests_full.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
steps:
2525
- name: Run Cimon
2626
if: matrix.os == 'ubuntu-latest'
27-
uses: cycodelabs/cimon-action@v0
27+
uses: cycodelabs/cimon-action@1c3e30d508634b3f4a60b02843126c9f93944d80 # v0.9.4
2828
with:
2929
client-id: ${{ secrets.CIMON_CLIENT_ID }}
3030
secret: ${{ secrets.CIMON_SECRET }}
@@ -36,25 +36,25 @@ jobs:
3636
*.ingest.us.sentry.io
3737
3838
- name: Checkout repository
39-
uses: actions/checkout@v4
39+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
4040
with:
4141
fetch-depth: 0
4242

4343
- name: Set up Python
44-
uses: actions/setup-python@v6
44+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4545
with:
4646
python-version: ${{ matrix.python-version }}
4747

4848
- name: Load cached Poetry setup
4949
id: cached-poetry
50-
uses: actions/cache@v5
50+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
5151
with:
5252
path: ~/.local
5353
key: poetry-${{ matrix.os }}-${{ matrix.python-version }}-3 # increment to reset cache
5454

5555
- name: Setup Poetry
5656
if: steps.cached-poetry.outputs.cache-hit != 'true'
57-
uses: snok/install-poetry@v1
57+
uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
5858
with:
5959
version: 2.2.1
6060

‎poetry.lock‎

Lines changed: 5 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)