GH Action - pin actions to GH commits

.github/workflows/assign-reviewers.yml

@@ -16,7 +16,7 @@ jobs:
     steps:
 
       - name: Assign reviewers
-        uses: dyladan/component-owners@main
+        uses: dyladan/component-owners@cdaadffde64c918909ee081e3fe044b8910f56c2 # tag: main
         with:
           assign-owners: "false"
           request-owner-reviews: "true"

.github/workflows/build-centos-native-container.yml

@@ -16,7 +16,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
       with:
         fetch-depth: 0 # fetching all, needed to correctly calculate version
 
@@ -29,7 +29,7 @@ jobs:
 
     - name: Publish native library Linux build
       if: (${{ job.status }} != 'cancelled')
-      uses: actions/[email protected]
+      uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
       with:
         name: bin-centos-native
         path: bin/tracer-home

.github/workflows/build-container.yml

@@ -26,7 +26,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
       with:
         fetch-depth: 0 # fetching all, needed to correctly calculate version
 
@@ -52,7 +52,7 @@ jobs:
 
     - name: Publish Linux build
       if: (${{ job.status }} != 'cancelled')
-      uses: actions/[email protected]
+      uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
       with:
         name: bin-${{ matrix.base-image }}-${{ matrix.architecture }}
         path: bin/tracer-home

.github/workflows/build-nuget-packages.yml

@@ -23,57 +23,57 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
 
       - name: Download Windows Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-windows-2022
           path: bin/ci-artifacts/bin-windows-2022
 
       - name: Download Ubuntu x64 Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-ubuntu-20.04
           path: bin/ci-artifacts/bin-ubuntu-20.04
 
       - name: Download Ubuntu arm64 Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-actuated-arm64-4cpu-8gb
           path: bin/ci-artifacts/bin-actuated-arm64-4cpu-8gb
 
       - name: Download Alpine x64 Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-alpine-x64
           path: bin/ci-artifacts/bin-alpine-x64
 
       - name: Download Alpine arm64 Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-alpine-arm64
           path: bin/ci-artifacts/bin-alpine-arm64
 
       - name: Download Mac-OS Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-macos-12
           path: bin/ci-artifacts/bin-macos-12
@@ -102,7 +102,7 @@ jobs:
           }
 
       - name: Upload Nuget Artifacts
-        uses: actions/[email protected]
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
         with:
           name: bin-nuget-packages
           path: bin/nuget-artifacts/

.github/workflows/build.yml

@@ -29,7 +29,7 @@ jobs:
         run: cat /etc/os-release
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
@@ -39,15 +39,15 @@ jobs:
           echo "DOTNET_INSTALL_DIR=~/.dotnet" >> $GITHUB_ENV
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
@@ -60,7 +60,7 @@ jobs:
 
       - name: Cache NuGet packages
         if: ${{ steps.nuget-cache.outputs.cache-hit != 'true' }}
-        uses: actions/cache/[email protected]
+        uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
@@ -79,7 +79,7 @@ jobs:
 
       - name: Download native CentOS Artifacts from build job
         if: ${{ matrix.machine == 'ubuntu-20.04' }}
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-centos-native
           path: bin/ci-artifacts/bin-centos-native
@@ -127,14 +127,14 @@ jobs:
 
       - name: Upload binaries
         if: always()
-        uses: actions/[email protected]
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
         with:
           name: bin-${{ matrix.machine }}
           path: bin/tracer-home
 
       - name: Upload installation scripts
         if: always()
-        uses: actions/[email protected]
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
         with:
           name: installation-scripts-${{ matrix.machine }}
           path: bin/installation-scripts

.github/workflows/build_and_push_image.yml

@@ -16,23 +16,23 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
 
       - name: Log in to the Container registry
-        uses: docker/[email protected]
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # tag: v3.2.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
-        uses: docker/[email protected]
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # tag: v5.5.1
         id: meta
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push Docker image
-        uses: docker/[email protected]
+        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c #tag: v6.3.0
         with:
           file: ./docker/centos-build.dockerfile
           push: true

.github/workflows/ci.yml

@@ -53,7 +53,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
@@ -63,29 +63,29 @@ jobs:
           echo "DOTNET_INSTALL_DIR=~/.dotnet" >> $GITHUB_ENV
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
 
       - name: Download Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-${{ matrix.machine }}
           path: bin/tracer-home
 
       - name: Install SQL Server (localdb)
         if: ${{ runner.os == 'Windows' }}
-        uses: potatoqualitee/[email protected]
+        uses: potatoqualitee/mssqlsuite@9a0136e208df60b8ecb62909f076bc34854fa55a # tag: v1.7
         with: 
           install: localdb
 
@@ -103,7 +103,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/[email protected]
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
         with:
           name: test-logs-${{ matrix.machine }}-${{ matrix.test-tfm }}-containers-${{ matrix.containers }}
           path: test-artifacts/
@@ -123,27 +123,27 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
 
       - name: Download Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-${{ matrix.machine }}
           path: bin/tracer-home
@@ -163,27 +163,27 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
 
       - name: Download Artifacts from build job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-${{ matrix.machine }}
           path: bin/tracer-home
@@ -196,7 +196,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/[email protected]
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag: v4.3.4
         with:
           name: test-logs-${{ matrix.machine }}-containers-${{ matrix.containers }}
           path: test-artifacts/
@@ -232,12 +232,12 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
       with:
         fetch-depth: 0 # fetching all, needed to correctly calculate version
 
     - name: Download Artifacts from build job
-      uses: actions/[email protected]
+      uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
       with:
         name: bin-${{ matrix.build-source }}
         path: bin/tracer-home
@@ -263,7 +263,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
         with:
           fetch-depth: 0 # fetching all, needed to correctly calculate version
 
@@ -273,22 +273,22 @@ jobs:
           echo "DOTNET_INSTALL_DIR=~/.dotnet" >> $GITHUB_ENV
 
       - name: Setup .NET
-        uses: actions/[email protected]
+        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # tag: v4.0.0
         with:
           dotnet-version: | 
             6.0.423
             7.0.410
             8.0.302
 
       - name: Check for NuGet packages cache
-        uses: actions/[email protected]
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag: v4.0.2
         id: nuget-cache
         with:
           key: ${{ hashFiles('**/Directory.packages.props', './build/LibraryVersions.g.cs', '**/packages.config' ) }}
           path: ${{ env.NUGET_PACKAGES }}
 
       - name: Download NuGet Artifacts from build-nuget-packages job
-        uses: actions/[email protected]
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag: v4.1.8
         with:
           name: bin-nuget-packages
           path: bin/nuget-artifacts/

.github/workflows/demo.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/[email protected]
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag: v4.1.2
 
     - name: Test demo
       run: make test