From 681a108263c5054629591ee9729efa49a3d745f5 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Sun, 23 Aug 2026 11:24:17 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 11 ++++++++++ .../assistants-codespace-assistant.yml | 10 +++++----- .../assistants-document-assistant.yml | 10 +++++----- .../assistants-explorer-assistant.yml | 10 +++++----- ...sistants-guided-conversation-assistant.yml | 10 +++++----- ...ssistants-knowledge-transfer-assistant.yml | 10 +++++----- .../assistants-navigator-assistant.yml | 10 +++++----- .../assistants-project-assistant.yml | 10 +++++----- .../assistants-prospector-assistant.yml | 10 +++++----- .../workflows/assistants-skill-assistant.yml | 10 +++++----- .github/workflows/libraries.yml | 4 ++-- .github/workflows/mcp-server-giphy.yml | 10 +++++----- .../mcp-server-memory-filesystem-edit.yml | 10 +++++----- .../workflows/mcp-server-memory-user-bio.yml | 10 +++++----- .../mcp-server-memory-whiteboard.yml | 10 +++++----- .../mcp-server-open-deep-research-clone.yml | 10 +++++----- .github/workflows/mcp-server-web-research.yml | 10 +++++----- .github/workflows/workbench-app.yml | 20 +++++++++---------- .github/workflows/workbench-service.yml | 10 +++++----- 19 files changed, 103 insertions(+), 92 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..2c48305b7 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/assistants-codespace-assistant.yml b/.github/workflows/assistants-codespace-assistant.yml index e192d5b84..26142f446 100644 --- a/.github/workflows/assistants-codespace-assistant.yml +++ b/.github/workflows/assistants-codespace-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-document-assistant.yml b/.github/workflows/assistants-document-assistant.yml index e624f499f..5efc0418e 100644 --- a/.github/workflows/assistants-document-assistant.yml +++ b/.github/workflows/assistants-document-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-explorer-assistant.yml b/.github/workflows/assistants-explorer-assistant.yml index 0e6ee2dda..03a1533d4 100644 --- a/.github/workflows/assistants-explorer-assistant.yml +++ b/.github/workflows/assistants-explorer-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-guided-conversation-assistant.yml b/.github/workflows/assistants-guided-conversation-assistant.yml index 25752f764..1d297ca4b 100644 --- a/.github/workflows/assistants-guided-conversation-assistant.yml +++ b/.github/workflows/assistants-guided-conversation-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-knowledge-transfer-assistant.yml b/.github/workflows/assistants-knowledge-transfer-assistant.yml index e4c3e4dfb..12d0ab0fe 100644 --- a/.github/workflows/assistants-knowledge-transfer-assistant.yml +++ b/.github/workflows/assistants-knowledge-transfer-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-navigator-assistant.yml b/.github/workflows/assistants-navigator-assistant.yml index 78ad1198f..ae10e61ce 100644 --- a/.github/workflows/assistants-navigator-assistant.yml +++ b/.github/workflows/assistants-navigator-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-project-assistant.yml b/.github/workflows/assistants-project-assistant.yml index ec3a7829d..34b098e4b 100644 --- a/.github/workflows/assistants-project-assistant.yml +++ b/.github/workflows/assistants-project-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-prospector-assistant.yml b/.github/workflows/assistants-prospector-assistant.yml index eb34b4dc2..0208bfddf 100644 --- a/.github/workflows/assistants-prospector-assistant.yml +++ b/.github/workflows/assistants-prospector-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/assistants-skill-assistant.yml b/.github/workflows/assistants-skill-assistant.yml index c87b00ec6..37f10b6f6 100644 --- a/.github/workflows/assistants-skill-assistant.yml +++ b/.github/workflows/assistants-skill-assistant.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/libraries.yml b/.github/workflows/libraries.yml index 99db4644f..cbf4f0052 100644 --- a/.github/workflows/libraries.yml +++ b/.github/workflows/libraries.yml @@ -27,10 +27,10 @@ jobs: matrix: python-version: ["3.11"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python ${{ matrix.python-version }} run: uv python install ${{ matrix.python-version }} diff --git a/.github/workflows/mcp-server-giphy.yml b/.github/workflows/mcp-server-giphy.yml index e853f827e..b0ba49814 100644 --- a/.github/workflows/mcp-server-giphy.yml +++ b/.github/workflows/mcp-server-giphy.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/mcp-server-memory-filesystem-edit.yml b/.github/workflows/mcp-server-memory-filesystem-edit.yml index 8efdef533..72cc08a12 100644 --- a/.github/workflows/mcp-server-memory-filesystem-edit.yml +++ b/.github/workflows/mcp-server-memory-filesystem-edit.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/mcp-server-memory-user-bio.yml b/.github/workflows/mcp-server-memory-user-bio.yml index 684281980..d11024a81 100644 --- a/.github/workflows/mcp-server-memory-user-bio.yml +++ b/.github/workflows/mcp-server-memory-user-bio.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/mcp-server-memory-whiteboard.yml b/.github/workflows/mcp-server-memory-whiteboard.yml index 1a923245c..920ddcbc3 100644 --- a/.github/workflows/mcp-server-memory-whiteboard.yml +++ b/.github/workflows/mcp-server-memory-whiteboard.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/mcp-server-open-deep-research-clone.yml b/.github/workflows/mcp-server-open-deep-research-clone.yml index 28623f6bf..86eab2a66 100644 --- a/.github/workflows/mcp-server-open-deep-research-clone.yml +++ b/.github/workflows/mcp-server-open-deep-research-clone.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/mcp-server-web-research.yml b/.github/workflows/mcp-server-web-research.yml index 5b1f74c20..26969b05f 100644 --- a/.github/workflows/mcp-server-web-research.yml +++ b/.github/workflows/mcp-server-web-research.yml @@ -31,10 +31,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python 3.11 run: uv python install 3.11 @@ -46,7 +46,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -69,9 +69,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} diff --git a/.github/workflows/workbench-app.yml b/.github/workflows/workbench-app.yml index d995368c0..26ae5a82f 100644 --- a/.github/workflows/workbench-app.yml +++ b/.github/workflows/workbench-app.yml @@ -28,16 +28,16 @@ jobs: if: ${{ github.ref != 'refs/heads/main' }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 name: Install pnpm with: version: 9 run_install: false - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 20 cache: "pnpm" @@ -63,16 +63,16 @@ jobs: name: production steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 name: Install pnpm with: version: 9 run_install: false - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 20 cache: "pnpm" @@ -98,7 +98,7 @@ jobs: - name: Upload artifact for deployment job if: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: semantic-workbench-node-app path: ./workbench-app/build/semantic-workbench-release.zip @@ -114,7 +114,7 @@ jobs: steps: - name: Download artifact from build job - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: semantic-workbench-node-app @@ -122,7 +122,7 @@ jobs: run: unzip semantic-workbench-release.zip - name: Login to Azure - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -130,7 +130,7 @@ jobs: - name: "Deploy to Azure Web App" id: deploy-to-webapp - uses: azure/webapps-deploy@v2 + uses: azure/webapps-deploy@5cfb776471c748b351e1ebf5770e208a54ace016 # v2.2.19 with: app-name: ${{ secrets.AZURE_WORKBENCH_APP_SERVICE_NAME }} slot-name: "Production" diff --git a/.github/workflows/workbench-service.yml b/.github/workflows/workbench-service.yml index a0206cb4a..0be3c7a24 100644 --- a/.github/workflows/workbench-service.yml +++ b/.github/workflows/workbench-service.yml @@ -36,10 +36,10 @@ jobs: python-version: ["3.11"] dbtype: ["sqlite", "postgresql"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install uv - uses: astral-sh/setup-uv@v3 + uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3.2.4 - name: Set up Python ${{ matrix.python-version }} run: uv python install ${{ matrix.python-version }} @@ -50,7 +50,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: docker-build run: | @@ -74,9 +74,9 @@ jobs: AZURE_WEBSITE_SUBSCRIPTION: ${{ secrets.AZURE_SUBSCRIPTION_ID }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: azure/login@v2 + - uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }}