diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6af3dd69..3885dc4f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,15 +17,15 @@ jobs:
contents: write
steps:
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Install uv
- uses: astral-sh/setup-uv@v6
+ uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
with:
python-version: "3.12"
- name: Poetry caches
- uses: actions/cache@v4
+ uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: |
~/.cache/
@@ -44,13 +44,13 @@ jobs:
- name: Coverage comment
id: coverage_comment
- uses: py-cov-action/python-coverage-comment-action@main
+ uses: py-cov-action/python-coverage-comment-action@91aaf3b39c7e2331c6bc77767ce017f5160c5f11 # current main
with:
GITHUB_TOKEN: ${{ github.token }}
ANNOTATE_MISSING_LINES: true
- name: Store Pull Request comment to be posted
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
if: steps.coverage_comment.outputs.COMMENT_FILE_WRITTEN == 'true'
with:
name: python-coverage-comment-action
diff --git a/.github/workflows/coverage-comment.yml b/.github/workflows/coverage-comment.yml
index f424d647..b5b2b62e 100644
--- a/.github/workflows/coverage-comment.yml
+++ b/.github/workflows/coverage-comment.yml
@@ -17,7 +17,7 @@ jobs:
contents: write
steps:
- name: Post comment
- uses: py-cov-action/python-coverage-comment-action@main
+ uses: py-cov-action/python-coverage-comment-action@91aaf3b39c7e2331c6bc77767ce017f5160c5f11 # current main
with:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_PR_RUN_ID: ${{ github.event.workflow_run.id }}
diff --git a/.github/workflows/e2e-external-phase-1.yml b/.github/workflows/e2e-external-phase-1.yml
index 2f21681e..0e0f6020 100644
--- a/.github/workflows/e2e-external-phase-1.yml
+++ b/.github/workflows/e2e-external-phase-1.yml
@@ -20,7 +20,7 @@ jobs:
env:
PR_NUMBER: ${{ github.event.pull_request.number }}
- name: Save artifact
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: pr_number
path: pr_number.txt
diff --git a/.github/workflows/e2e-external-phase-2.yml b/.github/workflows/e2e-external-phase-2.yml
index fbc94ab4..a05f0300 100644
--- a/.github/workflows/e2e-external-phase-2.yml
+++ b/.github/workflows/e2e-external-phase-2.yml
@@ -82,19 +82,19 @@ jobs:
JOB_ID: ${{ steps.extract_job_id.outputs.JOB_ID }}
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
# Important: use the commit that was reviewed. GitHub is making sure
# that this is race-condition-proof
ref: ${{ steps.extract_commit.outputs.COMMIT_ID }}
- name: Install uv
- uses: astral-sh/setup-uv@v6
+ uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
with:
python-version: "3.12"
- name: Poetry caches
- uses: actions/cache@v4
+ uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: |
~/.cache/
diff --git a/.github/workflows/manual-release.yml b/.github/workflows/manual-release.yml
index 08e7f5a3..2b7c005e 100644
--- a/.github/workflows/manual-release.yml
+++ b/.github/workflows/manual-release.yml
@@ -14,7 +14,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
fetch-tags: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 278bacf6..db017fd6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -86,7 +86,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v5
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
fetch-tags: true
diff --git a/coverage_comment/template_files/comment.md.j2 b/coverage_comment/template_files/comment.md.j2
index 53816f92..25ec89ea 100644
--- a/coverage_comment/template_files/comment.md.j2
+++ b/coverage_comment/template_files/comment.md.j2
@@ -250,11 +250,6 @@ _The report is truncated to {{ max_files }} files out of {{ count_files }}. To s
{%- block footer %}
-
-
-This report was generated by [python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action)
-
-
{% endblock footer -%}
diff --git a/tests/end_to_end/repo/.github/workflows/ci.yml b/tests/end_to_end/repo/.github/workflows/ci.yml
index b07205da..4291d08f 100644
--- a/tests/end_to_end/repo/.github/workflows/ci.yml
+++ b/tests/end_to_end/repo/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
pull-requests: write
contents: write
steps:
- - uses: actions/checkout@v5
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: actions/setup-python@v6
with:
@@ -40,7 +40,7 @@ jobs:
SUBPROJECT_ID: __ACTION_SUBPROJECT_ID__
- name: Store Pull Request comment to be posted
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
if: steps.coverage_comment.outputs.COMMENT_FILE_WRITTEN == 'true'
with:
name: python-coverage-comment-action
diff --git a/tests/unit/test_template.py b/tests/unit/test_template.py
index f516baad..1aeb86ba 100644
--- a/tests/unit/test_template.py
+++ b/tests/unit/test_template.py
@@ -96,11 +96,6 @@ def test_template(coverage_obj, diff_coverage_obj):
-
-
-This report was generated by [python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action)
-
-
@@ -228,11 +223,6 @@ def test_template_full(make_coverage, make_coverage_and_diff):
-
-
-This report was generated by [python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action)
-
-
@@ -283,11 +273,6 @@ def test_template__no_previous(coverage_obj_no_branch, diff_coverage_obj):
-
-
-This report was generated by [python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action)
-
-