ehealthsolutions/element-x-ios
3
0
Fork 0
mirror of https://github.com/Novaloop-AG/element-x-ios.git synced 2026-11-03 06:55:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Pin all 3rd party github actions to their full length commit SHA

Browse Source 
- this is the recommended security practice as per https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
This commit is contained in:
Stefan Ceriu
2025-03-17 18:21:33 +02:00
committed by Stefan Ceriu
parent fcdc09e271
commit ef73677518
6 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/integration-tests.yml
+2 -2
View File
@@ -73,7 +73,7 @@ jobs:
run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/IntegrationTests.xcresult > fastlane/test_output/integration-cobertura.xml run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/IntegrationTests.xcresult > fastlane/test_output/integration-cobertura.xml
- name: Upload coverage to Codecov - name: Upload coverage to Codecov
uses: codecov/codecov-action@v3 uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d #v3.1.4
with: with:
fail_ci_if_error: true fail_ci_if_error: true
token: ${{ secrets.CODECOV_TOKEN }} token: ${{ secrets.CODECOV_TOKEN }}
@@ -86,7 +86,7 @@ jobs:
- name: Upload test results to Codecov - name: Upload test results to Codecov
if: ${{ !cancelled() }} if: ${{ !cancelled() }}
uses: codecov/test-results-action@v1 uses: codecov/test-results-action@f2dba722c67b86c6caa034178c6e4d35335f6706 #v1.1.0
continue-on-error: true continue-on-error: true
with: with:
fail_ci_if_error: false fail_ci_if_error: false
.github/workflows/pr-build.yml
+2 -2
View File
@@ -35,7 +35,7 @@ jobs:
source ci_scripts/ci_common.sh && setup_github_actions_environment source ci_scripts/ci_common.sh && setup_github_actions_environment
- name: Import signing certificate - name: Import signing certificate
uses: apple-actions/import-codesign-certs@v3 uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d #v3
with: with:
p12-file-base64: ${{ secrets.ALPHA_CERTIFICATES_P12 }} p12-file-base64: ${{ secrets.ALPHA_CERTIFICATES_P12 }}
p12-password: ${{ secrets.ALPHA_CERTIFICATES_P12_PASSWORD }} p12-password: ${{ secrets.ALPHA_CERTIFICATES_P12_PASSWORD }}
@@ -52,7 +52,7 @@ jobs:
BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }} BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
- name: Add release notes and Diawi info - name: Add release notes and Diawi info
uses: NejcZdovc/comment-pr@v2 uses: NejcZdovc/comment-pr@a423635d183a8259308e80593c96fecf31539c26 #v2.1.0
with: with:
message: | message: |
:iphone: Scan the QR code below to install the build for this PR. :iphone: Scan the QR code below to install the build for this PR.
.github/workflows/translations-pr.yml
+1 -1
View File
@@ -28,7 +28,7 @@ jobs:
run: swift run tools generate-sas run: swift run tools generate-sas
- name: Create PR for Translations - name: Create PR for Translations
uses: peter-evans/create-pull-request@v7 uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e #v7.0.8
with: with:
token: ${{ secrets.ELEMENT_BOT_TOKEN }} token: ${{ secrets.ELEMENT_BOT_TOKEN }}
commit-message: Translations update commit-message: Translations update
.github/workflows/ui_tests.yml
+3 -3
View File
@@ -21,7 +21,7 @@ jobs:
cancel-in-progress: true cancel-in-progress: true
steps: steps:
- uses: nschloe/action-cached-lfs-checkout@v1 - uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 #v1.2.3
- uses: actions/cache@v4 - uses: actions/cache@v4
with: with:
@@ -59,7 +59,7 @@ jobs:
run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/UITests.xcresult > fastlane/test_output/ui-cobertura.xml run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/UITests.xcresult > fastlane/test_output/ui-cobertura.xml
- name: Upload coverage to Codecov - name: Upload coverage to Codecov
uses: codecov/codecov-action@v3 uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d #v3.1.4
with: with:
fail_ci_if_error: true fail_ci_if_error: true
token: ${{ secrets.CODECOV_TOKEN }} token: ${{ secrets.CODECOV_TOKEN }}
@@ -72,7 +72,7 @@ jobs:
- name: Upload test results to Codecov - name: Upload test results to Codecov
if: ${{ !cancelled() }} if: ${{ !cancelled() }}
uses: codecov/test-results-action@v1 uses: codecov/test-results-action@f2dba722c67b86c6caa034178c6e4d35335f6706 #v1.1.0
continue-on-error: true continue-on-error: true
with: with:
fail_ci_if_error: false fail_ci_if_error: false
.github/workflows/unit_tests.yml
+3 -3
View File
@@ -19,7 +19,7 @@ jobs:
cancel-in-progress: true cancel-in-progress: true
steps: steps:
- uses: nschloe/action-cached-lfs-checkout@v1 - uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 #v1.2.3
- uses: actions/cache@v4 - uses: actions/cache@v4
with: with:
@@ -60,7 +60,7 @@ jobs:
xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/PreviewTests.xcresult > fastlane/test_output/preview-cobertura.xml xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/PreviewTests.xcresult > fastlane/test_output/preview-cobertura.xml
- name: Upload coverage to Codecov - name: Upload coverage to Codecov
uses: codecov/codecov-action@v3 uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d #v3.1.4
with: with:
fail_ci_if_error: true fail_ci_if_error: true
token: ${{ secrets.CODECOV_TOKEN }} token: ${{ secrets.CODECOV_TOKEN }}
@@ -74,7 +74,7 @@ jobs:
- name: Upload test results to Codecov - name: Upload test results to Codecov
if: ${{ !cancelled() }} if: ${{ !cancelled() }}
uses: codecov/test-results-action@v1 uses: codecov/test-results-action@f2dba722c67b86c6caa034178c6e4d35335f6706 #v1.1.0
continue-on-error: true continue-on-error: true
with: with:
fail_ci_if_error: false fail_ci_if_error: false
.github/workflows/unit_tests_enterprise.yml
+1 -1
View File
@@ -22,7 +22,7 @@ jobs:
cancel-in-progress: true cancel-in-progress: true
steps: steps:
- uses: nschloe/action-cached-lfs-checkout@v1 - uses: nschloe/action-cached-lfs-checkout@f46300cd8952454b9f0a21a3d133d4bd5684cfc2 #v1.2.3
with: with:
submodules: recursive submodules: recursive
token: ${{ secrets.ELEMENT_BOT_TOKEN }} token: ${{ secrets.ELEMENT_BOT_TOKEN }}