Merge pull request #630 from splunk/dev/BJ/DVPL-12487-update-pin-gh-actions

Ickerday · web-flow · commit c7e9f872072f · 2025-08-21T15:29:09.000+02:00
DVPL-12477: Update and pin all GitHub Actions to commits instead of tags
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,17 +9,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout source
-        uses: actions/checkout@v3
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@9322b3ca74000aeb2c01eb777b646334015ddd72
         with:
           python-version: 3.7
       - name: Install dependencies
         run: pip install twine
       - name: Build package
         run: python setup.py sdist
       - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.8.10
+        uses: pypa/gh-action-pypi-publish@d417ba7e7683fa9104c42abe611c1f2c93c0727d
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}
@@ -29,14 +29,14 @@ jobs:
         run: |
           rm -rf ./docs/_build
           tox -e docs
-      - name : Docs Upload
-        uses: actions/upload-artifact@v3
+      - name: Docs Upload
+        uses: actions/upload-artifact@de65e23aa2b7e23d713bb51fbfcb6d502f8667d8
         with:
           name: python_sdk_docs
           path: docs/_build/html
       # Test upload
       # - name: Publish package to TestPyPI
-      #   uses: pypa/gh-action-pypi-publish@master
+      #   uses: pypa/gh-action-pypi-publish@d417ba7e7683fa9104c42abe611c1f2c93c0727d
       #   with:
       #     user: __token__
       #     password: ${{ secrets.test_pypi_password }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -1,17 +1,15 @@
 name: Python CI
 
-on:
-  [ push, workflow_dispatch ]
+on: [push, workflow_dispatch]
 
 jobs:
   build:
-
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         os:
           - ubuntu-latest
-        python: [ 3.9, 3.13 ]
+        python: [3.9, 3.13]
         splunk-version:
           - "8.1"
           - "8.2"
@@ -31,13 +29,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Run docker compose
-        run: SPLUNK_VERSION=${{matrix.splunk-version}} docker compose up -d
+        run: SPLUNK_VERSION=${{ matrix.splunk-version }} docker compose up -d
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@9322b3ca74000aeb2c01eb777b646334015ddd72
         with:
           python-version: ${{ matrix.python }}
 
@@ -48,4 +46,4 @@ jobs:
         run: tox -e py
   fossa-scan:
     uses: splunk/oss-scanning-public/.github/workflows/oss-scan.yml@main
-    secrets: inherit
+    secrets: inherit
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -1,5 +1,3 @@
-version: '3.6'
-
 services:
     splunk:
         image: "splunk/splunk:${SPLUNK_VERSION}"
@@ -11,9 +9,9 @@ services:
             - SPLUNK_PASSWORD=changed!
             - SPLUNK_APPS_URL=https://github.com/splunk/sdk-app-collection/releases/download/v1.1.0/sdkappcollection.tgz
         ports:
-            - 8000:8000
-            - 8088:8088
-            - 8089:8089
+            - "8000:8000"
+            - "8088:8088"
+            - "8089:8089"
         healthcheck:
             test: ['CMD', 'curl', '-f', 'http://localhost:8000']
             interval: 5s
