Skip to content

Pin workflow action refs to commit SHAs#834

Merged
kitsuyui merged 1 commit into
mainfrom
fix/pin-workflow-actions
May 25, 2026
Merged

Pin workflow action refs to commit SHAs#834
kitsuyui merged 1 commit into
mainfrom
fix/pin-workflow-actions

Conversation

@kitsuyui

Copy link
Copy Markdown
Owner

Summary

  • Pin checkout, Rust toolchain, and Rust cache actions in test and binary release workflows to commit SHAs.
  • Match the existing pinned action comments used by the other workflows.
  • Keep workflow behavior unchanged while removing mutable action tag refs.

Changed files

  • .github/workflows/test.yml
  • .github/workflows/binary-release.yml

Verification

  • go run github.com/rhysd/actionlint/cmd/actionlint@latest -shellcheck= .github/workflows/test.yml .github/workflows/binary-release.yml
  • cargo fmt --all -- --check
  • cargo check
  • cargo test
  • cargo clippy -- -D warnings
  • cargo build
  • git diff --check

Pin checkout, Rust toolchain, and Rust cache actions in the test and binary release workflows to commit SHAs while preserving the existing pinned-action comments.

This keeps workflow behavior unchanged and removes mutable action tag refs.
@github-actions

Copy link
Copy Markdown

Code Metrics Report

main (0a31f22) #834 (577b774) +/-
Coverage 69.3% 69.3% 0.0%
Code to Test Ratio 1:0.0 1:0.0 0.0
Test Execution Time 10s 12s +2s
Details
  |                     | main (0a31f22) | #834 (577b774) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          69.3% |          69.3% | 0.0% |
  |   Files             |             18 |             18 |    0 |
  |   Lines             |           1816 |           1816 |    0 |
  |   Covered           |           1260 |           1260 |    0 |
  | Code to Test Ratio  |          1:0.0 |          1:0.0 |  0.0 |
  |   Code              |           2375 |           2375 |    0 |
  |   Test              |              0 |              0 |    0 |
- | Test Execution Time |            10s |            12s |  +2s |

Reported by octocov

@kitsuyui
kitsuyui merged commit d11774a into main May 25, 2026
16 checks passed
@kitsuyui
kitsuyui deleted the fix/pin-workflow-actions branch May 25, 2026 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant