ci: Add version comments to uses-lines

secure-systems-lab · Oct 25, 2023 · 4e648bf · 4e648bf
1 parent 9fae624
commit 4e648bf
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/check-upstream-ed25519.yml b/.github/workflows/check-upstream-ed25519.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repository
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
     - name: Test if ed25519 upstream main HEAD is what we expect
       id: test_ed25519
       run: |
@@ -24,7 +24,7 @@ jobs:
           echo "output=$output" >> $GITHUB_OUTPUT
         fi
     - name: Create issue (unless one is open already)
-      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
       if: ${{ steps.test_ed25519.outputs.result == '1' }}
       with:
         script: |

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -37,10 +37,10 @@ jobs:
 
     steps:
       - name: Checkout securesystemslib
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: ${{ matrix.python-version }}
           cache: "pip"

diff --git a/.github/workflows/test-kms.yml b/.github/workflows/test-kms.yml
@@ -17,10 +17,10 @@ jobs:
 
     steps:
       - name: Checkout securesystemslib
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Python
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.x'
           cache: 'pip'
@@ -42,7 +42,7 @@ jobs:
 
       - name: File an issue on failure
         if: ${{ failure() }}
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410  # v6.4.1
         with:
           script: |
               const repo = context.repo.owner + "/" + context.repo.repo

diff --git a/.github/workflows/test-sigstore.yml b/.github/workflows/test-sigstore.yml
@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Checkout securesystemslib
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Python
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
+        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.x'
           cache: 'pip'
@@ -40,7 +40,7 @@ jobs:
 
       - name: File an issue on failure
         if: ${{ failure() }}
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
         with:
           script: |
               const repo = context.repo.owner + "/" + context.repo.repo