You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@opendal.apache.org by xu...@apache.org on 2026/03/24 08:59:58 UTC

(opendal) 01/01: ci: pin approved GitHub Actions refs

This is an automated email from the ASF dual-hosted git repository.

xuanwo pushed a commit to branch xuanwo/pin-approved-actions
in repository https://gitbox.apache.org/repos/asf/opendal.git

commit 4b4585dc892d62863fb40311247b12db6d8a3f2f
Author: Xuanwo <gi...@xuanwo.io>
AuthorDate: Tue Mar 24 16:59:28 2026 +0800

    ci: pin approved GitHub Actions refs
---
 .github/workflows/ci_bindings_python.yml                     | 2 +-
 .github/workflows/docs.yml                                   | 2 +-
 .github/workflows/test_behavior_binding_c.yml                | 2 +-
 .github/workflows/test_behavior_binding_cpp.yml              | 2 +-
 .github/workflows/test_behavior_binding_dotnet.yml           | 2 +-
 .github/workflows/test_behavior_binding_go.yml               | 2 +-
 .github/workflows/test_behavior_binding_java.yml             | 2 +-
 .github/workflows/test_behavior_binding_nodejs.yml           | 2 +-
 .github/workflows/test_behavior_binding_python.yml           | 4 ++--
 .github/workflows/test_behavior_core.yml                     | 2 +-
 .github/workflows/test_behavior_integration_object_store.yml | 2 +-
 11 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/ci_bindings_python.yml b/.github/workflows/ci_bindings_python.yml
index 77ab055c2..4602cc152 100644
--- a/.github/workflows/ci_bindings_python.yml
+++ b/.github/workflows/ci_bindings_python.yml
@@ -42,7 +42,7 @@ jobs:
       - name: Setup Rust toolchain
         uses: ./.github/actions/setup
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
         with:
           working-directory: "bindings/python"
       - uses: taiki-e/install-action@just
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index aa6d716d9..bcc92a394 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -149,7 +149,7 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
         with:
           enable-cache: true
 
diff --git a/.github/workflows/test_behavior_binding_c.yml b/.github/workflows/test_behavior_binding_c.yml
index 5b113aad5..86ec39d1e 100644
--- a/.github/workflows/test_behavior_binding_c.yml
+++ b/.github/workflows/test_behavior_binding_c.yml
@@ -46,7 +46,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_cpp.yml b/.github/workflows/test_behavior_binding_cpp.yml
index 6b5e19768..b9d4afa0f 100644
--- a/.github/workflows/test_behavior_binding_cpp.yml
+++ b/.github/workflows/test_behavior_binding_cpp.yml
@@ -46,7 +46,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_dotnet.yml b/.github/workflows/test_behavior_binding_dotnet.yml
index 868432e1f..bfccba869 100644
--- a/.github/workflows/test_behavior_binding_dotnet.yml
+++ b/.github/workflows/test_behavior_binding_dotnet.yml
@@ -50,7 +50,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_go.yml b/.github/workflows/test_behavior_binding_go.yml
index 522b1d15b..9ae7061d8 100644
--- a/.github/workflows/test_behavior_binding_go.yml
+++ b/.github/workflows/test_behavior_binding_go.yml
@@ -53,7 +53,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_java.yml b/.github/workflows/test_behavior_binding_java.yml
index 46b3b1202..9306f866b 100644
--- a/.github/workflows/test_behavior_binding_java.yml
+++ b/.github/workflows/test_behavior_binding_java.yml
@@ -46,7 +46,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_nodejs.yml b/.github/workflows/test_behavior_binding_nodejs.yml
index 575769328..562959b08 100644
--- a/.github/workflows/test_behavior_binding_nodejs.yml
+++ b/.github/workflows/test_behavior_binding_nodejs.yml
@@ -46,7 +46,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_binding_python.yml b/.github/workflows/test_behavior_binding_python.yml
index 9fd2a8f01..f71569282 100644
--- a/.github/workflows/test_behavior_binding_python.yml
+++ b/.github/workflows/test_behavior_binding_python.yml
@@ -46,13 +46,13 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
         with:
           enable-cache: true
       - name: Build with maturin
diff --git a/.github/workflows/test_behavior_core.yml b/.github/workflows/test_behavior_core.yml
index aa0086e2f..251315f2b 100644
--- a/.github/workflows/test_behavior_core.yml
+++ b/.github/workflows/test_behavior_core.yml
@@ -45,7 +45,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
diff --git a/.github/workflows/test_behavior_integration_object_store.yml b/.github/workflows/test_behavior_integration_object_store.yml
index 07293c61c..716dca8dd 100644
--- a/.github/workflows/test_behavior_integration_object_store.yml
+++ b/.github/workflows/test_behavior_integration_object_store.yml
@@ -46,7 +46,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup 1Password Connect
-        uses: 1password/load-secrets-action/configure@v3
+        uses: 1Password/load-secrets-action/configure@dafbe7cb03502b260e2b2893c753c352eee545bf # v3.2.1
         with:
           connect-host: ${{ secrets.OP_CONNECT_HOST }}
           connect-token: ${{ secrets.OP_CONNECT_TOKEN }}