Merge branch 'actions-security' into develop

haskell · Jul 5, 2024 · a7932e9 · a7932e9
2 parents bbce00f + 28de4a8
commit a7932e9
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/bindists.yaml b/.github/workflows/bindists.yaml
@@ -96,7 +96,7 @@ jobs:
         run: |
           ${{ matrix.installCmd }} curl bash git ${{ matrix.toolRequirements }}
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Install ghcup and bindist
         run: .github/workflows/install-bindist.sh
@@ -112,7 +112,7 @@ jobs:
         apk update
         apk add curl bash git binutils-gold curl gcc g++ gmp-dev libc-dev libffi-dev make musl-dev ncurses-dev perl tar xz
       shell: sh
-    - uses: actions/checkout@v1 #This version must stay old enough to remain compatible with the container image
+    - uses: actions/checkout@af513c7a016048ae468971c52ed77d9562c7c819 # v1
     - name: Install ghcup and bindist
       run: bash .github/workflows/install-bindist.sh
 
@@ -128,7 +128,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - if: ${{ github.event_name == 'workflow_dispatch' }}
         name: Install ghcup and bindist
@@ -156,7 +156,7 @@ jobs:
           git config --global --get-all safe.directory | grep '^\*$' || git config --global --add safe.directory "*"
         shell: bash
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - if: matrix.ARCH == 'ARM'
         uses: docker://hasufell/arm32v7-ubuntu-haskell:focal
@@ -174,7 +174,7 @@ jobs:
     name: Install FreeBSD binary
     runs-on: [self-hosted, FreeBSD, X64]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Run build
         run: .github/workflows/install-bindist.sh
@@ -208,7 +208,7 @@ jobs:
           export TZ=Asia/Singapore
           sudo apt-get update && sudo apt-get install -y curl bash git gnupg libarchive-dev
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Cache Cabal
         uses: actions/cache@v2
@@ -245,7 +245,7 @@ jobs:
         run: |
           sudo apt-get update && sudo apt-get install -y curl bash git gnupg
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Test signatures
         run: .github/workflows/test-sigs.sh
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -22,15 +22,15 @@ jobs:
           - ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
-      - uses: haskell/actions/setup@v1.2
+      - uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2.7.5
         with:
           ghc-version: ${{ matrix.ghc }}
           cabal-version: ${{ matrix.cabal }}
 
       - name: Cache Cabal
-        uses: actions/cache@v2
+        uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # v2.1.7
         env:
           cache-name: cache-cabal
         with: