From e88048c4917726121abfaf190f2cc494d46cbe33 Mon Sep 17 00:00:00 2001 From: sundarshankar89 Date: Fri, 27 Mar 2026 14:50:06 +0530 Subject: [PATCH] pin gh actions --- .github/workflows/onpush.yml | 6 +++--- .github/workflows/pypi_release.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/onpush.yml b/.github/workflows/onpush.yml index a0f2c7b..92da64a 100644 --- a/.github/workflows/onpush.yml +++ b/.github/workflows/onpush.yml @@ -19,10 +19,10 @@ jobs: DATABRICKS_TOKEN: ${{ secrets.DATABRICKS_TOKEN }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Python 3.9 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: '3.9' cache: 'pip' # caching pip dependencies @@ -57,7 +57,7 @@ jobs: - name: Publish test coverage continue-on-error: true #this will first work once repo is public - uses: codecov/codecov-action@v3 + uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 with: token: ${{ secrets.CODECOV_TOKEN }} env_vars: OS,PYTHON diff --git a/.github/workflows/pypi_release.yml b/.github/workflows/pypi_release.yml index cbba265..a1ee719 100644 --- a/.github/workflows/pypi_release.yml +++ b/.github/workflows/pypi_release.yml @@ -23,10 +23,10 @@ jobs: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Python 3.9 - uses: actions/setup-python@v5 + uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: python-version: '3.9' cache: 'pip' # caching pip dependencies @@ -46,4 +46,4 @@ jobs: - name: Publish distribution 📦 to PyPI if: startsWith(github.ref, 'refs/tags') - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0