chore(deps): pin dependencies

solid-o · Feb 23, 2025 · 63494bb · 63494bb
1 parent 866fd92
commit 63494bb
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/cscheck.yml b/.github/workflows/cscheck.yml
@@ -10,12 +10,12 @@ jobs:
         runs-on: ubuntu-latest
         name: Check code style
         steps:
-            -   uses: actions/checkout@v4
+            -   uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
                 with:
                     fetch-depth: 0
 
             -   name: Install PHP
-                uses: shivammathur/setup-php@v2
+                uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
                 with:
                     coverage: none
                     php-version: "8.1"

diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
@@ -10,12 +10,12 @@ jobs:
         runs-on: ubuntu-latest
         name: Static analysis
         steps:
-            -   uses: actions/checkout@v4
+            -   uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
                 with:
                     fetch-depth: 0
 
             -   name: Install PHP
-                uses: shivammathur/setup-php@v2
+                uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
                 with:
                     coverage: none
                     php-version: "8.3"

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -17,10 +17,10 @@ jobs:
 
         name: PHP ${{ matrix.php_version }}
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
             - name: Setup PHP with pecl extension
-              uses: shivammathur/setup-php@v2
+              uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # v2
               with:
                   php-version: ${{ matrix.php_version }}
                   tools: 'infection'
@@ -45,7 +45,7 @@ jobs:
                   sed -i 's@'$GITHUB_WORKSPACE'@/github/workspace/@g' junit.xml
 
             - name: SonarCloud Scan
-              uses: sonarsource/[email protected]
+              uses: sonarsource/sonarcloud-github-action@32ea6119a4bd977dc6307acb6bbbf277152ede95 # v1.5
               env:
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}