Skip to content

ci: pin GitHub Actions to commit SHA for security #790

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
EricGrill wants to merge 1 commit into
base: master
Choose a base branch
from
+10 −5
Open

ci: pin GitHub Actions to commit SHA for security #790

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 10 additions & 5 deletions .github/workflows/testnet-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,12 +17,14 @@ jobs:
# 1 - checkout project and dependencies

- name: Checkout Phoenix
uses: actions/checkout@v2
# v2.7.0
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5
with:
path: phoenix

- name: Checkout lightning-kmp
uses: actions/checkout@v2
# v2.7.0
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5
with:
repository: ACINQ/lightning-kmp
ref: master
Expand All @@ -31,14 +33,16 @@ jobs:
# 2 - setup cache/jdk

- name: Cached Konan
uses: actions/cache@v4
# v4.3.0
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
with:
path: ~/.konan
key: ${{ runner.os }}-konan-${{ hashFiles('**/*.gradle*') }}-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties') }}
restore-keys: ${{ runner.os }}-konan-

- name: Set up jdk 1.17
uses: actions/setup-java@v1
# v1.4.4
uses: actions/setup-java@b6e674f4b717d7b0ae3baee0fbe79f498905dfde
with:
java-version: 17

Expand Down Expand Up @@ -78,7 +82,8 @@ jobs:
# 5 - upload apk

- name: Upload apk as artifact for this action
uses: actions/upload-artifact@v4
# v4.6.2
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
with:
name: phoenix-testnet
path: upload/phoenix-testnet-latest.apk
Expand Down