Skip to content

Pin GitHub Actions to immutable commit SHAs #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
roryabraham wants to merge 1 commit into from
Closed

Pin GitHub Actions to immutable commit SHAs #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 10 additions & 5 deletions .github/workflows/expo-preview.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,22 +8,26 @@ jobs:
if: github.event.pull_request.head.repo.owner.login == 'react-navigation'
steps:
- name: Checkout
uses: actions/checkout@v2
# v2
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5

- name: Setup Node.js
uses: actions/setup-node@v3
# v3
uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7
with:
node-version: 16.x
cache: 'yarn'

- name: Setup Expo
uses: expo/expo-github-action@v6
# v6
uses: expo/expo-github-action@c3c02de017ef8cf6152daee160e8a47a2340a5e5
with:
token: ${{ secrets.EXPO_TOKEN }}

- name: Restore yarn cache
id: yarn-cache
uses: actions/cache@v3
# v3
uses: actions/cache@2f8e54208210a422b2efd51efaa6bd6d7ca8920f
with:
path: |
'**/node_modules'
Expand All @@ -45,7 +49,8 @@ jobs:
run: echo "::set-output name=path::@react-navigation/react-navigation-example?release-channel=pr-${{ github.event.number }}"

- name: Comment on PR
uses: actions/github-script@v3
# v3
uses: actions/github-script@ffc2c79a5b2490bd33e0a41c1de74b877714d736
with:
github-token: ${{secrets.GITHUB_TOKEN}}
script: |
Expand Down
12 changes: 8 additions & 4 deletions .github/workflows/expo.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,22 +11,26 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
# v2
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5

- name: Setup Node.js
uses: actions/setup-node@v3
# v3
uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7
with:
node-version: 16.x
cache: 'yarn'

- name: Setup Expo
uses: expo/expo-github-action@v6
# v6
uses: expo/expo-github-action@c3c02de017ef8cf6152daee160e8a47a2340a5e5
with:
token: ${{ secrets.EXPO_TOKEN }}

- name: Restore yarn cache
id: yarn-cache
uses: actions/cache@v3
# v3
uses: actions/cache@2f8e54208210a422b2efd51efaa6bd6d7ca8920f
with:
path: |
'**/node_modules'
Expand Down
6 changes: 4 additions & 2 deletions .github/workflows/rebase.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,12 +10,14 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
# v2
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5
with:
fetch-depth: 0

- name: Automatic Rebase
uses: cirrus-actions/rebase@1.2
# 1.2
uses: cirrus-actions/rebase@cf2ad5908b365d40882ef06dab959717ec1aaf71
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Expand Down