Skip to content

Commit b0468e8

Browse files
alonamalonam
authored
Merge branch 'main' into alonam/IDE-5719_secret_scanning_optimizations
2 parents 97239ff + 9851ee8 commit b0468e8

16 files changed

Lines changed: 50 additions & 33 deletions

‎.github/dependabot.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,3 +9,11 @@ updates:
99
directory: "/" # Location of package manifests
1010
schedule:
1111
interval: "weekly"
12+
- package-ecosystem: "github-actions"
13+
directory: "/"
14+
schedule:
15+
interval: "weekly"
16+
groups:
17+
gh-actions-packages:
18+
patterns:
19+
- "*"

‎.github/workflows/check-regressions.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -35,16 +35,16 @@ jobs:
3535
DD_APP_KEY: ${{ secrets.DD_APP_KEY }}
3636
DD_SITE: ${{ vars.DD_SITE }}
3737
steps:
38-
- uses: actions/checkout@v4
38+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
3939
with:
4040
ref: main
4141

4242
# This can be changed to the `set-up-rust` composite action after it lands on main.
4343
- name: Set up Rust
44-
uses: actions-rust-lang/setup-rust-toolchain@v1.10.1
44+
uses: actions-rust-lang/setup-rust-toolchain@11df97af8e8102fd60b60a77dfbf58d40cd843b8
4545

4646
- name: Checkout test repositories
47-
uses: actions/checkout@v4
47+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
4848
with:
4949
repository: ${{ matrix.repo.org }}/${{ matrix.repo.name }}
5050
path: ${{ matrix.repo.org }}/${{ matrix.repo.name }}
@@ -82,14 +82,14 @@ jobs:
8282
run: node ./.github/scripts/check-regressions.js ${{ matrix.repo.org }}/${{ matrix.repo.name }} result-pre.json result-post.json
8383

8484
- name: Upload unique changes from before
85-
uses: actions/upload-artifact@v4
85+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
8686
if: steps.regression.outputs.diff1files != ''
8787
with:
8888
name: failures-before-${{ matrix.repo.org }}-${{ matrix.repo.name }}
8989
path: ${{ steps.regression.outputs.diff1files }}
9090

9191
- name: Upload unique changes from after
92-
uses: actions/upload-artifact@v4
92+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
9393
if: steps.regression.outputs.diff2files != ''
9494
with:
9595
name: failures-after-${{ matrix.repo.org }}-${{ matrix.repo.name }}

‎.github/workflows/coverage.yaml.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,11 @@ jobs:
88
env:
99
CARGO_TERM_COLOR: always
1010
steps:
11-
- uses: actions/checkout@v5
11+
- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
1212
- name: Install Rust
1313
run: rustup update stable
1414
- name: Install cargo-llvm-cov
15-
uses: taiki-e/install-action@cargo-llvm-cov
15+
uses: taiki-e/install-action@d50ec1d40c9c7a251e48a8f8810527d411553bdc
1616
- name: Generate code coverage
1717
run: cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info
1818
- name: Upload coverage to Datadog

‎.github/workflows/docker-build.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,10 @@ jobs:
2828

2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@v6
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3232

3333
- name: Set up Docker BuildKit
34-
uses: docker/setup-buildx-action@v3
34+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
3535

3636
- name: Build Docker image for ${{ matrix.platform }}
3737
run: |

‎.github/workflows/ghcr.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,26 +24,26 @@ jobs:
2424

2525
steps:
2626
- name: Checkout repository
27-
uses: actions/checkout@v4
27+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2828

2929
# Set the current SHA as the version so that it's exposed on the server.
3030
- name: Set the version
3131
shell: bash
3232
run: sed "s/development/$GITHUB_SHA/g" crates/static-analysis-kernel/src/constants.rs > bla && rm crates/static-analysis-kernel/src/constants.rs && mv bla crates/static-analysis-kernel/src/constants.rs
3333

3434
- name: Set up Docker Buildx
35-
uses: docker/setup-buildx-action@v3
35+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
3636

3737
- name: Login to GitHub Container Registry
38-
uses: docker/login-action@v3
38+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
3939
with:
4040
registry: ${{ env.REGISTRY }}
4141
username: ${{ github.actor }}
4242
password: ${{ secrets.GITHUB_TOKEN }}
4343

4444
- name: Extract metadata (tags, labels) for Docker
4545
id: meta
46-
uses: docker/metadata-action@v5
46+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
4747
with:
4848
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
4949
flavor: |
@@ -55,7 +55,7 @@ jobs:
5555
5656
- name: Build and push Docker image
5757
id: push
58-
uses: docker/build-push-action@v5
58+
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
5959
with:
6060
context: .
6161
push: true

‎.github/workflows/integration-tests.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
- { file: './misc/integration-test-secrets.sh', gha_alias: 'Secrets' }
3636
name: Run integration test - ${{ matrix.scripts.gha_alias }}
3737
steps:
38-
- uses: actions/checkout@v4
38+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3939
- uses: ./.github/actions/set-up-rust
4040
- name: Execute script
4141
run: ${{ matrix.scripts.file }}

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
is-production: ${{ steps.set-var.outputs.is-production }}
1717
steps:
1818
- name: Checkout repository
19-
uses: actions/checkout@v4
19+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2020
with:
2121
fetch-depth: 0
2222

@@ -79,14 +79,14 @@ jobs:
7979
git config --global --add safe.directory $GITHUB_WORKSPACE
8080
8181
- name: Checkout repository
82-
uses: actions/checkout@v4
82+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
8383

8484
- uses: ./.github/actions/set-up-rust
8585
with:
8686
target: ${{ matrix.target }}
8787

8888
- name: Install cross-compilation tools
89-
uses: taiki-e/setup-cross-toolchain-action@v1
89+
uses: taiki-e/setup-cross-toolchain-action@b8d1a322a6009a2b7220f53996695778eef89b41 # v1
9090
with:
9191
target: ${{ matrix.target }}
9292

@@ -121,7 +121,7 @@ jobs:
121121
move *.zip ..\..\..\
122122
123123
- name: Upload assets
124-
uses: actions/upload-artifact@v4
124+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
125125
with:
126126
name: ${{ matrix.target }}
127127
path: |
@@ -146,12 +146,12 @@ jobs:
146146
contents: write
147147
steps:
148148
- name: Checkout repository
149-
uses: actions/checkout@v4
149+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
150150
with:
151151
fetch-depth: 0
152152

153153
- name: Download build artifacts
154-
uses: actions/download-artifact@v4
154+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
155155
with:
156156
path: artifacts
157157

‎.github/workflows/rust.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,15 +31,15 @@ jobs:
3131
DD_SITE: ${{ vars.DD_SITE }}
3232
steps:
3333
- name: Checkout repository
34-
uses: actions/checkout@v4
34+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3535

3636
- uses: ./.github/actions/set-up-rust
3737

3838
- name: Fetch dependencies
3939
run: cargo fetch
4040

4141
- name: Run cargo ${{ matrix.cargo_cmd.cmd_name }} ${{ matrix.cargo_cmd.args }}
42-
uses: actions-rs/cargo@v1
42+
uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1
4343
with:
4444
command: ${{ matrix.cargo_cmd.cmd_name }}
4545
args: ${{ matrix.cargo_cmd.args }}

‎.github/workflows/sca.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
name: Datadog SBOM Generation and Upload
1212
steps:
1313
- name: Checkout
14-
uses: actions/checkout@v4
14+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1515
- uses: ./.github/actions/set-up-rust
1616
- name: cargo install sbom
1717
run: cargo install --version 0.8.4 cargo-sbom
@@ -23,7 +23,7 @@ jobs:
2323
cargo sbom --cargo-package static-analysis-server --output-format cyclone_dx_json_1_4 > static-analysis-server.json
2424
- name: Generate SBOM and Upload
2525
id: software-composition-analysis
26-
uses: DataDog/datadog-sca-github-action@main
26+
uses: DataDog/datadog-sca-github-action@2cc1486ee1b07318ba608b86e40d124efa76ddb5 # main
2727
with:
2828
dd_api_key: ${{ secrets.DD_API_KEY }}
2929
dd_app_key: ${{ secrets.DD_APP_KEY }}

‎.github/workflows/test-rules.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
outputs:
1717
languages: ${{ steps.extract.outputs.languages }}
1818
steps:
19-
- uses: actions/checkout@v4
19+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2020
- id: extract
2121
name: Extract languages from file
2222
run: |
@@ -55,7 +55,7 @@ jobs:
5555
DD_SITE: datadoghq.com
5656
steps:
5757
- name: Checkout repository
58-
uses: actions/checkout@v4
58+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
5959

6060
- uses: ./.github/actions/set-up-rust
6161

0 commit comments

Comments
 (0)